From 68d68a16ad81e46240d9397407bb246bd7d8ca2d Mon Sep 17 00:00:00 2001 From: Gabriel Becker Date: Thu, 21 May 2026 12:36:32 +0200 Subject: [PATCH] file_permission_user_init_files_root: include /root in OCIL check --- .../file_permission_user_init_files_root/rule.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/linux_os/guide/system/accounts/accounts-session/file_permission_user_init_files_root/rule.yml b/linux_os/guide/system/accounts/accounts-session/file_permission_user_init_files_root/rule.yml index b94d60723f83..d6c50cccaa7b 100644 --- a/linux_os/guide/system/accounts/accounts-session/file_permission_user_init_files_root/rule.yml +++ b/linux_os/guide/system/accounts/accounts-session/file_permission_user_init_files_root/rule.yml @@ -30,7 +30,7 @@ ocil_clause: 'they are not 0740 or more permissive' ocil: |- To verify that all user initialization files have a mode of 0740 or less permissive, run the following command: -
$ sudo find /home -type f -name '\.*' \( -perm -0002 -o -perm -0020 \)
+
$ sudo find /root /home -type f -name '\.*' \( -perm -0002 -o -perm -0020 \)
There should be no output. fixtext: |-