Configure a File/Directory Permission Control (Unix)

Identify this control

The statement you provide is like the control name that describes what it is and how it should be implemented in the environment. You need to decide which category the control belongs to. This is important because users can search and filter controls by category, they can also search by keywords in the statement.

What are the Scan Parameters?

The scan parameters are used to gather data needed for compliance evaluation at scan time.

Click Add Parameters, and make these settings:

File/Directory path - This is the path to the Unix file or directory to be evaluated.

Tell me about Control Technologies

Your control may apply to many technologies. Select each technology you are interested in and provide a rationale statement and expected value.

If you plan to enter the same settings for each technology you only need to do it once. Make your selections in the "Default Values for Control Technologies" section first and then select the check box for each technology you want. you can view that the settings get copied automatically to each technology that you select.

Make these settings:

Rationale - Enter a rationale statement describing how the control should be implemented for each technology.

Default Value. Enter the expected value for each technology as a regular expression. Our service returns a single string literal with permissions information in this format:

OWNER:GROUP:PERMISSIONS:ABSOLUTEPATH

Knowing the format of the permissions information returned, you can write a regular expression that will match your pass/fail conditions. Learn more

Tell me about references

Add up to 10 references for the control. These may be references to internal policies, documents and web sites. For each reference, enter a description, a URL or both. When providing a URL, you must start the URL with http://, https:// or ftp://.  For example, enter http://www.qualys.com to link to the Qualys web site. Once added users have the option to include references in policy reports.