III - Administrative Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
All run control scripts must have no extended ACLs.
<VulnDiscussion>If the startup files are writable by other users, these users could modify the startup files to insert malicious commands int...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
Run control scripts executable search paths must contain only authorized paths.
<VulnDiscussion>The executable search path (typically the PATH environment variable) contains a list of directories for the shell to search t...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
Run control scripts library search paths must contain only authorized paths.
<VulnDiscussion>The library search path environment variable(s) contain a list of directories for the dynamic linker to search to find librar...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
Run control scripts lists of preloaded libraries must contain only authorized paths.
<VulnDiscussion>The library preload list environment variable contains a list of libraries for the dynamic linker to load before loading the ...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
Run control scripts must not execute world writable programs or scripts.
<VulnDiscussion>World writable files could be modified accidentally or maliciously to compromise system integrity.</VulnDiscussion><...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules