From 7a9422c7f96da56854f6f3aa28e3704a2eef89cc Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Fri, 23 Aug 2024 14:03:39 +0100 Subject: [PATCH] initial Signed-off-by: Mark Bolwell --- section_7/cis_7.1/cis_7.1.13.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/section_7/cis_7.1/cis_7.1.13.yml b/section_7/cis_7.1/cis_7.1.13.yml index ad7a812..ec53104 100644 --- a/section_7/cis_7.1/cis_7.1.13.yml +++ b/section_7/cis_7.1/cis_7.1.13.yml @@ -6,7 +6,7 @@ command: audit_sgid_suid: title: 7.1.13 | Ensure SUID and SGID files are reviewed - exec: df --local -P | awk '{if (NR!=1) print $7}' | xargs -I '{}' find '{}' -xdev -type f -perm \( -2000 -o -4000 \) + exec: df --local -P | awk '{if (NR!=1) print $7}' | xargs -I '{}' find '{}' -xdev -type f \( -perm -2000 -o -perm -4000 \) timeout: {{ .Vars.timeout_ms }} exit-status: 0 stdout: