`CM-05(06)` Limit Library Privileges

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version

unchanged CM part of CM-5

Limit Library Privileges

Limit privileges to change software resident within software libraries.

Software libraries include privileged programs.

ac-2

CM-05(06) privileges to change software resident within software libraries are limited.

STIG rules that implement this control 38

APPL-15-005001 CAT I The macOS system must ensure System Integrity Protection is enabled.

APPL-26-005001 CAT I The macOS system must ensure System Integrity Protection (SIP) is enabled.

APSC-DV-001440 CAT II The applications must limit privileges to change the software resident within software libraries.

UBTU-22-232015 CAT II Ubuntu 22.04 LTS must have system commands set to a mode of "755" or less permissive.
UBTU-22-232020 CAT II Ubuntu 22.04 LTS library files must have mode "755" or less permissive.
UBTU-22-232050 CAT II Ubuntu 22.04 LTS must have system commands owned by "root" or a system account.
UBTU-22-232055 CAT II Ubuntu 22.04 LTS must have system commands group-owned by "root" or a system account.
UBTU-22-232060 CAT II Ubuntu 22.04 LTS library directories must be owned by "root".
UBTU-22-232065 CAT II Ubuntu 22.04 LTS library directories must be group-owned by "root".
UBTU-22-232070 CAT II Ubuntu 22.04 LTS library files must be owned by "root".
UBTU-22-232075 CAT II Ubuntu 22.04 LTS library files must be group-owned by "root".

UBTU-24-300006 CAT II Ubuntu 24.04 LTS library files must have mode 0755 or less permissive.
UBTU-24-300007 CAT II Ubuntu 24.04 LTS library files must be owned by root.
UBTU-24-300008 CAT II Ubuntu 24.04 LTS library directories must be owned by root.
UBTU-24-300009 CAT II Ubuntu 24.04 LTS library files must be group-owned by root or a system account.
UBTU-24-300010 CAT II Ubuntu 24.04 LTS library directories must be group-owned by root.
UBTU-24-300011 CAT II Ubuntu 24.04 LTS must have system commands set to a mode of 0755 or less permissive.
UBTU-24-300012 CAT II Ubuntu 24.04 LTS must have system commands owned by root or a system account.
UBTU-24-300013 CAT II Ubuntu 24.04 LTS must have system commands group-owned by root or a system account.

CISC-ND-000460 CAT II The Cisco router must be configured to limit privileges to change the software resident within software libraries.

RHEL-10-400100 CAT II RHEL 10 must be configured so that system commands are owned by "root".
RHEL-10-400105 CAT II RHEL 10 must be configured so that system commands are group-owned by root or a system account.
RHEL-10-400110 CAT II RHEL 10 must be configured so that library files are owned by "root".
RHEL-10-400115 CAT II RHEL 10 must be configured so that library files are group-owned by "root" or a system account.
RHEL-10-400120 CAT II RHEL 10 must be configured so that library directories are owned by "root".
RHEL-10-400125 CAT II RHEL 10 must be configured so that library directories are group-owned by "root" or a system account.
RHEL-10-400205 CAT II RHEL 10 must enforce mode "755" or less permissive for system commands.
RHEL-10-400210 CAT II RHEL 10 must enforce mode "755" or less permissive on library directories.
RHEL-10-400215 CAT II RHEL 10 must enforce mode "755" or less permissive for library files.

RHEL-09-232010 CAT II RHEL 9 system commands must have mode 755 or less permissive.
RHEL-09-232015 CAT II RHEL 9 library directories must have mode 755 or less permissive.
RHEL-09-232020 CAT II RHEL 9 library files must have mode 755 or less permissive.
RHEL-09-232190 CAT II RHEL 9 system commands must be owned by root.
RHEL-09-232195 CAT II RHEL 9 system commands must be group-owned by root or a system account.
RHEL-09-232200 CAT II RHEL 9 library files must be owned by root.
RHEL-09-232205 CAT II RHEL 9 library files must be group-owned by root or a system account.
RHEL-09-232210 CAT II RHEL 9 library directories must be owned by root.
RHEL-09-232215 CAT II RHEL 9 library directories must be group-owned by root or a system account.