9.5 Verify System File Permissions

Information

The pkg verify and command checks the accuracy of installed directory structures and files.

Rationale:

It is important to ensure that system files and directories are maintained with the permissions they were intended to have from the OS vendor (Oracle).

Solution

Correct or justify any items discovered in the Audit step. Perform the following to set correct any identified package errors:

# pkg fix

Exercise caution in running this command as it may reverse modifications implemented previously including some of those recommended by this document. Rather than use this command broadly, it is recommended that it be used more tactically to correct specific package problems when possible.

See Also

https://workbench.cisecurity.org/benchmarks/4777

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: Unix

Control ID: 13e47a4df1216c89f59f0ceac95c4d0be583f292aeb9b464ccf20e527e87b453