UCF STIG Viewer Logo

All system start-up files must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4089 GEN001660 M6 SV-37845r1_rule ECLP-1 Medium
Description
System start-up files not owned by root could lead to system compromise by allowing malicious users or applications to modify them for unauthorized purposes. This could lead to system and network compromise.
STIG Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide 2013-04-09

Details

Check Text ( C-37043r1_chk )
Open a terminal session and enter the following command to verify the ownership is set to the original installation settings.

diskutil verifyPermissions /

If files are shown with incorrect ownership, this is a finding.
Fix Text (F-32311r1_fix)
Open a terminal session and enter the following command to reset the ownership to the original installation settings.

diskutil repairPermissions /