The TOSS file integrity tool must be configured to verify Access Control Lists (ACLs).
An XCCDF Rule
Description
ACLs can provide permissions beyond those permitted through the file mode and must be verified by file integrity tools. TOSS installation media come with a file integrity tool, Advanced Intrusion Detection Environment (AIDE).
- ID
- SV-253104r991589_rule
- Version
- TOSS-04-040630
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the file integrity tool to check file and directory ACLs.
If AIDE is installed, ensure the "acl" rule is present on all file and directory selection lists.