RHEL 10 must enforce mode "0740" or less permissive for local initialization files.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-281064 | SRG-OS-000080-GPOS-00048 | RHEL-10-400235 | SV-281064r1165547_rule | 2026-03-11 | 1 |
Description
Local initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon login.
ℹ️ Check
Verify RHEL 10 is configured so that all local initialization files have a mode of "0740" or less permissive with the following command:
Note: The example will be for the "disauser" user, who has a home directory of "/home/disauser".
$ sudo find /home -maxdepth 2 -type f -name ".*" -exec stat -c "%n %a" {} \; | awk '$2 > 740'
/home/disauser/.bash_profile 770
If any local initialization files are returned, this indicates a mode more permissive than "0740", and this is a finding.
✔️ Fix
Configure RHEL 10 so that all local initialization files have a mode of "0740" or less permissive with the following command:
Note: The example will be for the "disauser" user, who has a home directory of "/home/disauser".
$ sudo chmod 0740 /home/disauser/.<INIT_FILE>