GEN001810 - Skeleton files must not have extended ACLs - '/etc/security/.profile'

Information

If the skeleton files are not protected, unauthorized personnel could change user startup parameters and possibly jeopardize user files.

Solution

Remove the extended ACL from the skeleton file(s) and disable extended permissions.

#acledit /etc/security/.profile
#acledit /etc/security/mkuser.sys

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22357, Rule-ID|SV-38736r1_rule, STIG-ID|GEN001810, Vuln-ID|V-22357

Plugin: Unix

Control ID: 85f3232aab5f7b733a6b00fcc8cee8c9ef3ab8b35a5abfccfd608f6502f8a8e0