2.4 Ensure there are no 'other' writable objects

Information

The system is audited for world writable files.

Rationale:

An audit should be performed on the system to search for the presence of world writable files. Files should only be world writable when absolutely necessary.

Solution

Review the currently mounted local filesystems using the following to find all world writable files on local JFS/JFS2 filesystems only:

find / ( -fstype jfs -o -fstype jfs2 ) -type f -perm -o+w -ls

Remedy any files in the list, e.g., chmod o-w {filename}

Document any files, and motivate why they are world writeable, and also add documentation re: when/why this exception ceases.

Default Value:

N/A




Additional Information:

Reversion:

To reinstate world writable permission:

chmod o+w <dir or file>

See Also

https://workbench.cisecurity.org/files/4119

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: Unix

Control ID: 657797b7c148e8877ede319827d18a9d6432d9ade3285275b12dc0d511163404