[PATCH 08/14] Created OCIL for world_writable_files_system_ownership Modified description text, which already had manual check information, to create OCIL content
Shawn Wells
shawn at redhat.com
Wed Sep 19 16:11:46 UTC 2012
---
RHEL6/input/system/permissions/files.xml | 9 +++++----
1 files changed, 5 insertions(+), 4 deletions(-)
diff --git a/RHEL6/input/system/permissions/files.xml b/RHEL6/input/system/permissions/files.xml
index b82c024..afe6671 100644
--- a/RHEL6/input/system/permissions/files.xml
+++ b/RHEL6/input/system/permissions/files.xml
@@ -370,13 +370,14 @@ and the cause should be discovered and addressed.
<title>Ensure All World-Writable Directories Are Owned by a System Account</title>
<description>Locate any directories in local partitions which are
world-writable and ensure that they are owned by root or another
-system account. The following command will discover and print these
+system account.</description>
+<ocil> The following command will discover and print these
(assuming only system accounts have a uid lower than 500). Run it
-once for each local partition PART:
-<pre># find PART -xdev -type d -perm -0002 -uid +500 -print</pre>
+once for each local partition <i>PART</i>:
+<pre># find <i>PART</i> -xdev -type d -perm -0002 -uid +500 -print</pre>
If this command produces any output, investigate why the
current owner is not root or another system account.
-</description>
+</ocil>
<rationale>
Allowing a user account to own a world-writeable directory is
undesirable because it allows the owner of that directory to remove
--
1.7.1
--VbJkn9YxBvnuCH5J--
More information about the scap-security-guide
mailing list