Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The Oracle Linux operating system must be configured so that all files and directories have a valid group owner.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-221725 | OL07-00-020330 | SV-221725r603260_rule | Medium |
| Description |
|---|
| Files without a valid group owner may be unintentionally inherited if a group is assigned the same Group Identifier (GID) as the GID of the files without a valid group owner. |
| STIG | Date |
|---|---|
| Oracle Linux 7 Security Technical Implementation Guide | 2022-09-07 |
Details
| Check Text ( C-23440r419247_chk ) |
|---|
| Verify all files and directories on the system have a valid group. Check the owner of all files and directories with the following command: Note: The value after -fstype must be replaced with the filesystem type. XFS is used as an example. # find / -fstype xfs -nogroup If any files on the system do not have an assigned group, this is a finding. |
| Fix Text (F-23429r419248_fix) |
|---|
| Either remove all files and directories from the system that do not have a valid group, or assign a valid group to all files and directories on the system with the "chgrp" command: # chgrp |