AIX System Security:5.File/Directory permissions

jiazf82

1.Verify passwd and group file permissions

chown -R root:security /etc/passwd /etc/group /etc/security
chown -R root:audit /etc/security/audit
chmod 644 /etc/passwd /etc/group
chmod 750 /etc/security
chmod -R go-w,o-r /etc/security

2.World-writable directories should have their sticky bit set

for part in `mount | grep dev | awk '{print $2}' | \
grep -Ev 'cdrom|nfs'`; do
echo "Searching $part"
find $part -xdev -type d \( -perm -0002 -a ! -perm -1000 \) -print
done

3.Find unauthorized world-writable files

for part in `mount | grep dev | awk '{print $2}' | \
egrep -v 'cdrom|nfs'`; do
echo "Searching $part"
find $part -xdev -type f \
\( -perm -0002 -a ! -perm -1000 \) -print
done

4.Find unauthorized SUID/SGID system executables

for part in `mount | grep dev | awk '{print $2}' | \
egrep -v 'cdrom|nfs'`; do
echo "Searching $part"
find $part \( -perm -04000 -o -perm -02000 \) \
-type f -xdev -ls
done

5.Find “unowned” files and directories

find / \( -nouser -o -nogroup \) -ls

本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/4031/showart_196577.html