[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Ensure users dot files are not group or world writables

ID: oval:org.secpod.oval:def:70706Date: (C)2021-04-20   (M)2023-12-20
Class: COMPLIANCEFamily: unix




While the system administrator can establish secure permissions for users' "dot" files, the users can easily override these. Rationale: Group or world-writable user configuration files may enable malicious users to steal or modify other users' data or to gain another user's system privileges.

Platform:
Ubuntu 16.04
Reference:
CCE-95663-1
CPE    1
cpe:/o:ubuntu:ubuntu_linux:16.04
CCE    1
CCE-95663-1
XCCDF    1
xccdf_org.secpod_benchmark_general_Ubuntu_16_04

© SecPod Technologies