Ensure that Root's Path Does Not Include World or Group-Writable Directories
An XCCDF Rule
Description
For each element in root's path, run:# ls -ld DIRand ensure that write permissions are disabled for group and other.
Rationale
Such entries increase the risk that root could execute code provided by unprivileged users, and potentially malicious code.