The system boot loader configuration file(s) must be owned by root.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-50933	OL6-00-000065	SV-65139r2_rule		Medium

Description
Only root should be able to modify important boot parameters.

STIG	Date
Oracle Linux 6 Security Technical Implementation Guide	2016-06-05

Details

Check Text ( C-53387r2_chk )
To check the ownership of "/boot/grub/grub.conf", run the command: $ ls -lL /boot/grub/grub.conf If properly configured, the output should indicate that the owner is "root". If it does not, this is a finding.

Fix Text (F-55733r3_fix)
The file "/boot/grub/grub.conf" should be owned by the "root" user to prevent destruction or modification of the file. To properly set the owner of "/boot/grub/grub.conf", run the command: # chown root /boot/grub/grub.conf