| name | CIS Ubuntu 14.04 LTS - 6.2.6 Ensure root PATH Integrity |
| description | Verify root PATH does not contain writable or non-root-owned directories |
| category | cis-os-hardening |
| version | 2.1.0 |
| author | cyberstrike-official |
| tags | ["cis","ubuntu","ubuntu-14.04","level-1","scored","user-accounts"] |
| cis_id | 6.2.6 |
| cis_benchmark | CIS Ubuntu Linux 14.04 LTS Benchmark v2.1.0 |
| tech_stack | ["ubuntu","linux"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | medium |
6.2.6 Ensure root PATH Integrity (Scored)
Profile Applicability
- Level 1 - Server
- Level 1 - Workstation
Description
The root user can execute any command on the system and could be fooled into executing programs unintentionally if the PATH is not set correctly.
Rationale
Including the current working directory (.) or other writable directory in root's executable path makes it likely that an attacker can gain superuser access by forcing an administrator operating as root to execute a Trojan horse program.
Audit Procedure
Run the following script and verify no results are returned:
#!/bin/bash
if [ "`echo $PATH | grep ::`" != "" ]; then
echo "Empty Directory in PATH (::)"
fi
if [ "`echo $PATH | grep :$`" != "" ]; then
echo "Trailing : in PATH"
fi
p=`echo $PATH | sed -e 's/::/:/' -e 's/:$//' -e 's/:/ /g'`
set -- $p
while [ "$1" != "" ]; do
if [ "$1" = "." ]; then
echo "PATH contains ."
shift
continue
fi
[ -d ];
dirperm=` -ldH | -f1 -d`
[ ` | -c6 ` != ];
[ ` | -c9 ` != ];
dirown=` -ldH | awk `
[ != ] ;
is not owned by root
is not a directory
