Details

This feature prevents the ability to delete or rename files in world writable directories

(such as /tmp) that are owned by another user.

Solution

Run the following command to set the sticky bit on all world writable directories – # df –local -P | awk {‘if (NR!=1) print $6’} | xargs -I ‘{}’ find ‘{}’ -xdev -type d
-perm -0002 2>/dev/null | xargs chmod a+t

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1863

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-3(3)
• CSCv6|13

Source

• Tenable.com/audits