For Ensure No World-Writable Files Exist - (CCE-26910-0), with either the
stig-rhel6-server or the usgcb-rhel6-server profiles selected from the SCAP stream, when
run with SCC 220.127.116.11, may produce a false-negative when running SCC 18.104.22.168 on a RHEL6V1R2
The non-complaint system contains world-writable files:
$ /usr/bin/sudo /usr/bin/stat -c '%a' /etc/audit/audit.rules
See the following report output:
Ensure No World-Writable Files Exist
Description: It is generally a good idea to remove global (other) write access to a file
when it is discovered. However, check with documentation for specific applications before
making changes. Also, monitor for recurring world-writable files, as these may be symptoms
of a misconfigured application or user account.
Title: Find Unauthorized World-Writable Files
Description: The world-write permission should be disabled for all files.
true (All item-state comparisons must be true.)
true (world writable files)
Test ID: oval:ssg:tst:447
Title: world writable files
Check Existence: No collected items may exist.
Check: Result is based on check existence only.
State Operator: All item-state comparisons must be true.
Object ID: oval:ssg:obj:1524
recurse_direction = down
recurse = directories
recurse_file_system = local
path must be equal to '/'
filename must match the pattern '^.*$'
filter must be equal to 'oval:ssg:ste:2230'
Show replies by thread