Details

Software sometimes insists on being installed in the /Library Directory and have inappropriate world writable permissions. Folders in /Library should not be world writable. The audit check excludes the /Library/Caches folder where the sticky bit is set.

Solution

Change permissions so that “Others” can only execute. (Example Below) sudo chmod -R o-w /Bad/Directory

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/299

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-6

Source

• Tenable.com/audits