UCF STIG Viewer Logo

Files in /var/news must be owned by root or news.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4277 GEN006340 SV-35122r1_rule ECLP-1 Medium
Description
If critical system files are not owned by a privileged user, system integrity could be compromised.
STIG Date
HP-UX 11.31 Security Technical Implementation Guide 2018-09-14

Details

Check Text ( C-34980r4_chk )
Check the ownership of the files in news.
# find /var/news -type f | xargs -n1 ls -lL

If any files are not owned by root or news, this is a finding.
Fix Text (F-30274r1_fix)
Change the ownership of the files in /news to root or news.

# chown root /news/*