UCF STIG Viewer Logo

System files, programs, and directories must be group-owned by a system group.


Overview

Finding ID Version Rule ID IA Controls Severity
V-796 GEN001240 SV-39098r1_rule ECLP-1 Medium
Description
Restricting permissions will protect the files from unauthorized modification.
STIG Date
Draft AIX Security Technical Implementation Guide 2011-08-17

Details

Check Text ( C-8015r2_chk )
Check the group-ownership of system files, programs, and directories.

Procedure:
# ls –lLa /etc /bin /usr/bin /usr/lbin /usr/usb /sbin /usr/sbin

If any system file, program, or directory is not owned by a system group, this is a finding.
Fix Text (F-33348r1_fix)
Change the group-owner of system files to a system group. Procedure:
# chgrp sys /path/to/system/file (System groups other than sys may be used.)