All valid SUID/SGID files must be documented.
An XCCDF Rule
Description
There are valid reasons for SUID/SGID programs, but it is important to identify and review such programs to ensure they are legitimate.
- ID
- SV-216198r959010_rule
- Version
- SOL-11.1-070190
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
The root role is required.
Determine the existence of any set-UID programs that do not belong on the system, and work with the owners (or system administrator) to determine the best course of action in accordance with site policy.