Skip to content

Ensure All World-Writable Directories Are Group Owned by a System Account

An XCCDF Rule

Description

All directories in local partitions which are world-writable should be group owned by root or another system account. If any world-writable directories are not group owned by a system account, this should be investigated. Following this, the files should be deleted or assigned to an appropriate group.

Rationale

Allowing a user account to group own a world-writable directory is undesirable because it allows the owner of that directory to remove or replace any files that may be placed in the directory by other users.

ID
xccdf_org.ssgproject.content_rule_dir_perms_world_writable_system_owned_group
Severity
Medium
References
Updated