The Oracle Linux operating system must be configured so that all files and directories have a valid owner.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-221724	OL07-00-020320	SV-221724r603260_rule		Medium

Description
Unowned files and directories may be unintentionally inherited if a user is assigned the same User Identifier (UID) as the UID of the un-owned files.

STIG	Date
Oracle Linux 7 Security Technical Implementation Guide	2022-09-07

Details

Check Text ( C-23439r419244_chk )
Verify all files and directories on the system have a valid owner. Check the owner of all files and directories with the following command: Note: The value after -fstype must be replaced with the filesystem type. XFS is used as an example. # find / -fstype xfs -nouser If any files on the system do not have an assigned owner, this is a finding.

Fix Text (F-23428r419245_fix)
Either remove all files and directories from the system that do not have a valid user, or assign a valid user to all unowned files and directories on the system with the "chown" command: # chown