Ensure All World-Writable Directories Are Owned by a System Account
An XCCDF Rule
Description
All directories in local partitions which are world-writable should be owned by root or another system account. If any world-writable directories are not owned by a system account, this should be investigated. Following this, the files should be deleted or assigned to an appropriate owner.
warning alert: Warning
This rule can take a long time to perform the check and might consume a considerable
amount of resources depending on the number of directories present on the system. It is
not a problem in most cases, but especially systems with a large number of directories can
be affected. See
https://access.redhat.com/articles/6999111.Rationale
Allowing a user account to own a world-writable directory is undesirable because it allows the owner of that directory to remove or replace any files that may be placed in the directory by other users.
- ID
- xccdf_org.ssgproject.content_rule_dir_perms_world_writable_system_owned
- Severity
- Medium
- References
- Updated