Control Compliance Suite

 View Only
  • 1.  world writable files in CIS standard

    Posted Feb 26, 2014 08:56 AM

    Has anybody managed to add their own  world writable files to the list of files that are excluded from the check. That is you need to allow these files to be

    world writeable and PASS the check



  • 2.  RE: world writable files in CIS standard

    Posted Mar 04, 2014 03:46 PM

    This check will need to be created manually.   Since the acceptable list of files would change per flavor of Unix and per customer.   The CCS Check builder doesn't lend itself to using input parameters or reading files.  I would guess you need to use some type of complex logic of if..then...else on the entire list of files.  and then you would have to put in an expression to check for anything other than those files.  It would be pretty complicated and would require a lot of testing.   Maybe an alternative method would be to run a find command on the host for all World Writeable files and then direct the output to a text file.   Then create a check that will analyze the text file and base your pass/fail on the results of the text file.  This option would require coordination between the manual script/find parameter and when CCS would collect the data and evaluate the file.   

    Unfortunately, there is not a simple answer to this question.



  • 3.  RE: world writable files in CIS standard

    Posted Mar 05, 2014 01:54 AM

    Thanks for the feedback.