GEN001760 - All global initialization files must be group-owned by root, sys, bin, other, system, or the system default - '/etc/csh.cshrc'

Information

Global initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon logon. Failure to give ownership of sensitive files or utilities to root or bin provides the designated owner and unauthorized users with the potential to access sensitive information or change the system configuration which could weaken the system's security posture.

Solution

Change the group ownership of the global initialization file(s) with incorrect group ownership.

Procedure:
# chgrp root <global initialization file>
or:
# ls -lL /etc/bashrc /etc/csh.cshrc /etc/csh.login /etc/csh.logout /etc/environment /etc/ksh.kshrc /etc/profile /etc/suid_profile /etc/profile.d/* 2>null|sed 's/^[^/]*//'|xargs stat -L -c %G:%n|egrep -v '^(root|sys|bin|other):'|cut -d: -f2|xargs chgrp root
will set the group of all files not currently owned by an approved group to root.

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-11983, Rule-ID|SV-37285r1_rule, STIG-ID|GEN001760, Vuln-ID|V-11983

Plugin: Unix

Control ID: 710c97fb9e2ea6e9bad6845b02f5bc54aff12727a211f21a6028c6409eed0c8a