SV-216418r959010: Permissions on user home directories must be 750 or less permissive. | Solaris 11 SPARC STIG SCAP Benchmark

Loading benchmark…

Assessment Title

Rule Text

Permissions on user home directories must be 750 or less permissive.

Description

Discussion Text

Group-writable or world-writable user home directories may enable malicious users to steal or modify other users' data or to gain another user's system privileges.

How this relates to the STIG checklist: STIG vs SCAP benchmark.

IA Controls

NIST SP 800-53

Not mappedCCI-000366V-48133SV-61005

References

DPMS Target Solaris 11 SPARC DISA DPMS Target Solaris 11 SPARC 4022

SCC Automation Reference

The reconstructed evaluation script behind this rule's OVAL check(s) — every module a compound check combines, with this rule's own concrete values and DISA's SCC tool's real per-module mechanism curated from static teardown of SCC releases.

Assessment Script Powered by AISandbox-executed

A standalone Shell script to assess this control automatically. Review before running it in your environment.

Syntax-checked and actually executed in an isolated sandbox (not the real system this checks) — confirmed to run without errors.

#!/bin/sh
# OVAL Definition: oval:mil.disa.stig.solaris11:def:79
export HOME=$(getent passwd "$USER" | cut -d: -f6)
if [ ! -d "$HOME" ]; then echo "PASS"; exit 0; fi
for user in $(getent passwd | cut -d: -f1); do
    dir=$(getent passwd "$user" | cut -d: -f6)
    if [ "$dir" != "$HOME" ]; then continue; fi
    perms=$(stat -c "%a" "$dir")
    if [ "$perms" -ge 750 ]; then continue; else echo "FAIL"; exit 1; fi
done
echo "PASS"
exit 0

Remediation

The root role is required. 

Change the permissions on users' directories to 750 or less permissive.

# chmod 750 [directory name]