The Oracle Linux operating system must be configured so that the file integrity tool is configured to verify Access Control Lists (ACLs).
An XCCDF Rule
Description
ACLs can provide permissions beyond those permitted through the file mode and must be verified by file integrity tools.
- ID
- SV-221759r991589_rule
- Version
- OL07-00-021600
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the file integrity tool to check file and directory ACLs.
If AIDE is installed, ensure the "acl" rule is present on all uncommented file and directory selection lists.