Files in /etc/news must be owned by root or news.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-4277 | GEN006340 | SV-37735r1_rule | ECLP-1 | Medium |
| Description |
|---|
| If critical system files are not owned by a privileged user, system integrity could be compromised. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2017-03-01 |
Details
| Check Text ( C-36931r1_chk ) |
|---|
| Check the ownership of the files in "/etc/news". Procedure: # ls -al /etc/news If any files are not owned by root or news, this is a finding. |
| Fix Text (F-32195r1_fix) |
|---|
| Change the ownership of the files in "/etc/news" to root or news. Procedure: # chown root /etc/news/* |