Rule ID
SV-44903r1_rule
Version
V1R12
CCIs
File system extended ACLs provide access to files beyond what is allowed by the unix permissions of the files.
Check the root account's home directory has no extended ACL.
# grep "^root" /etc/passwd | awk -F":" ‘{print $6}’
# ls -ld <root home directory>
If the permissions include a '+' the directory has an extended ACL. If the file has an extended ACL and it has not been documented with the IAO, this is a finding.Remove the extended ACL from the root account's home directory. # setfacl --remove-all <root home directory>