The sticky bit must be set on all world writable directories.
An XCCDF Rule
Description
Files in directories that have had the "sticky bit" enabled can only be deleted by users that have both write permissions for the directory in which the file resides, as well as ownership of the file or directory, or have sufficient privileges. As this prevents users from overwriting each others' files, whether it be accidental or malicious, it is generally appropriate for most world-writable directories (e.g., /tmp).
- ID
- SV-216417r959010_rule
- Version
- SOL-11.1-070010
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
The root role is required.
Ensure that the "sticky bit" is set on any directories identified during the check steps.
# chmod +t [directory name]