Rotate your device back to portrait to use STIG Vault.
The Solaris 11 X86 Security Technical Implementation Guide (V3 R7) has 214 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
Check the permissions on the files or scripts executed from system startup scripts to see if they are world writable.
Create a list of all potential run command level scripts.
# ls -l /etc/init.d/* /etc/rc* | tr '\011' ' ' | tr -s ' ' | cut -f 9,9 -d " "
Create a list of world writable files.
# find / -perm -002 -type f >> WorldWritableFileList
Determine if any of the world writeable files in "WorldWritableFileList" are called from the run command level scripts.
Note: Depending upon the number of scripts vs. world writable files, it may be easier to inspect the scripts manually.
# more `ls -l /etc/init.d/* /etc/rc* | tr '\011' ' ' | tr -s ' ' | cut -f 9,9 -d " "`
If any system startup script executes any file or script that is world writable, this is a finding.
Remove the world writable permission from programs or scripts executed by run control scripts.
Procedure:
# chmod o-w <program or script executed from run control script>