UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The /etc/sysctl.conf file must be group-owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4335 GEN000000-LNX00500 SV-62951r1_rule ECLP-1 Medium
Description
The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the system's security.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2015-06-05

Details

Check Text ( C-51757r1_chk )
Check /etc/sysctl.conf group ownership:
# ls -lL /etc/sysctl.conf
If /etc/sysctl.conf is not group-owned by root, this is a finding.
Fix Text (F-53523r1_fix)
Use the chgrp command to change the group owner of /etc/sysctl.conf to root:
# chgrp root /etc/sysctl.conf