UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

System files, programs, and directories must be group-owned by a system group.


Overview

Finding ID Version Rule ID IA Controls Severity
V-796 GEN001240 M6 SV-37989r1_rule ECLP-1 Medium
Description
Restricting permissions will protect the files from unauthorized modification.
STIG Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide 2013-04-09

Details

Check Text ( C-37574r1_chk )
Open a terminal session and use the following command to verify group ownership of system files, programs, and directories.

ls -lLa /usr/bin

If any system file, program, or directory is not owned by a system group, this is a finding.
Fix Text (F-32817r1_fix)
Open a terminal session and enter the following command to change the group ownership of system files, programs, and directories to a system group.

chgrp wheel