OCI: Incorrect permissions on pacct file

Applies To:

Oracle Cloud Infrastructure - Version N/A and later
Linux x86-64

Symptoms:

Users are able to list and run ”lastcomm” command that should be disallowed by default.

[opc@hostname]$ lastcomm | head

lastcomm               opc      pts/0      0.01 secs Sun Dec  8 08:46

bash              F    opc      pts/0      0.00 secs Sun Dec  8 08:46

bash              F    opc      pts/0      0.00 secs Sun Dec  8 08:46

id                     opc      pts/0      0.00 secs Sun Dec  8 08:46

bash              F    opc      pts/0      0.00 secs Sun Dec  8 08:46

[opc@hostname]$

Cause:

Incorrect permissions on the “pacct” file:

[opc@hostname]$ sudo ls -ld /var/account

-rw-r--r--. 1 root root 142464 Dec  8 08:50 /var/account/pacct

[opc@hostname]$

Solution:

• Reset the permissions on the files in the “psacct” package.