login_shells_writeable
This built-in function makes sure that no shell is world/group writeable.
If a shell is world writeable (or group writeable) then non-privileged users can replace it with any program. This enables a malicious user to force other users of that shell to execute arbitrary commands when they log in.
Ensure the permissions of each shell are set appropriately.
Usage
<item>
name: "login_shells_writeable"
description: "This check reports user accounts with login shells that have group or world write permissions."
</item>