V-910

Discussion

World-writable files could be modified accidentally or maliciously to compromise system integrity.

Check Content

Check the permissions on the files or scripts executed from system startup scripts to see if they are world-writable.

Procedure:
# more <startup script>
# ls -lL <script or executable referenced by startup script>

Alternatively, obtain a list of all world-writable files on the system and check system startup scripts to determine if any are referenced.

Procedure:
# find / -perm -0002 -type f | grep –v ‘^/proc’ > wwlist
If any system startup script executes any file or script that is world-writable, this is a finding.