AIX device files and directories must only be writable by users with a system account or as configured by the vendor.
An XCCDF Rule
Description
<VulnDiscussion>System device files in writable directories could be modified, removed, or used by an unprivileged user to control system hardware.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215184r991560_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Remove the world-writable permission from the device file(s) using command:
# chmod o-w <device file>