The AIX user home directories must not have extended ACLs.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-215332 | AIX7-00-003019 | SV-215332r991592_rule | Medium |
| Description |
| Excessive permissions on home directories allow unauthorized access to user files. |
| STIG | Date |
| IBM AIX 7.x Security Technical Implementation Guide | 2024-08-16 |
Details
| Check Text (C-16530r294447_chk) |
| Verify user home directories have no extended ACLs using command: # cat /etc/passwd | cut -f 6,6 -d ":" | xargs -n1 aclget * * ACL_type AIXC * attributes: base permissions owner(root): rwx group(system): r-x others: r--- extended permissions disabled If extended permissions are not disabled, this is a finding. |
| Fix Text (F-16528r294448_fix) |
| Remove the extended ACL from the user home directory and disable extended permissions: # acledit <directory> |