Permissions on user home directories must be 750 or less permissive.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-216181 | SRG-OS-000480 | SOL-11.1-070020 | SV-216181r959010_rule | 2024-11-25 | 3 |
| Description |
|---|
| Group-writable or world-writable user home directories may enable malicious users to steal or modify other users' data or to gain another user's system privileges. |
| ℹ️ Check |
|---|
| The root role is required. Check that the permissions on users' home directories are 750 or less permissive. # for dir in `logins -ox |\ awk -F: '($8 == "PS") { print $6 }'`; do find ${dir} -type d -prune \( -perm -g+w -o \ -perm -o+r -o -perm -o+w -o -perm -o+x \) -ls done If output is created, this is finding. |
| ✔️ Fix |
|---|
| The root role is required. Change the permissions on users' directories to 750 or less permissive. # chmod 750 [directory name] |