AIX device files and directories must only be writable by users with a system account or as configured by the vendor.
An XCCDF Rule
Description
System device files in writable directories could be modified, removed, or used by an unprivileged user to control system hardware.
- ID
- SV-215184r991560_rule
- Version
- AIX7-00-001019
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Remove the world-writable permission from the device file(s) using command:
# chmod o-w <device file>