OpenSCAP Finding: Ensure No World-Writable Files Exist

When this image has been deployed to a host system, the host no longer passes the OpenSCAP rule Ensure No World-Writable Files Exist. These files need to have the world write flag removed prior to image creation.

Rule: xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable

Oval Definition ID: xccdf_org.ssgproject.content_rule_file_permissions_unauthorized_world_writable

Affected Files:

• /var/lib/docker/overlay2/5ee06f0fcec26852690aecca20640e1f3fa053a79651c718a89c0cb935d7e2c0/diff/etc/pki/ca-trust/source/anchors/Certificates_PKCS7_v5.7_DoD.pem
• /var/lib/docker/overlay2/8cc2c71353626f41c258726deb43540b668d5e33a3a93be1358eca04dc292dd4/diff/usr/local/tomcat/bin/catalina.sh