The SUSE operating system file integrity tool must be configured to verify Access Control Lists (ACLs).
An XCCDF Rule
Description
<VulnDiscussion>ACLs can provide permissions beyond those permitted through the file mode and must be verified by file integrity tools.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-217150r880939_rule
- Severity
- Low
- References
- Updated
Remediation - Manual Procedure
Configure the SUSE operating system file integrity tool to check file and directory ACLs.
If AIDE is installed, ensure the "acl" rule is present on all file and directory selection lists.