UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The files in /var/news must be group-owned by root or news.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4278 GEN006360 SV-35126r1_rule ECLP-1 Medium
Description
If critical system files do not have a privileged group-owner, system integrity could be compromised.
STIG Date
HP-UX 11.23 Security Technical Implementation Guide 2012-05-25

Details

Check Text ( C-34984r3_chk )
Check news files group ownership.
# find /var/news -type f | xargs -n1 ls -lL

If news files are not group-owned by root or news, this is a finding.
Fix Text (F-30278r1_fix)
Change the group owner of the files in news to root or news.

# chgrp root /news/*