The file permissions, ownership, and group membership of system files and commands must match the vendor values.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-71849	RHEL-07-010010	SV-86473r2_rule		High

Description
Discretionary access control is weakened if a user or group has access permissions to system files and directories greater than the default. Satisfies: SRG-OS-000257-GPOS-00098, SRG-OS-000278-GPOS-00108

STIG	Date
Red Hat Enterprise Linux 7 Security Technical Implementation Guide	2017-12-14

Details

Check Text ( C-72081r4_chk )
Verify the file permissions, ownership, and group membership of system files and commands match the vendor values. Check the file permissions, ownership, and group membership of system files and commands with the following command: # rpm -Va \| grep '^.M' If there is any output from the command indicating that the ownership or group of a system file or command, or a system file, has permissions less restrictive than the default, this is a finding.

Check Text ( C-72081r4_chk )

Verify the file permissions, ownership, and group membership of system files and commands match the vendor values.

Check the file permissions, ownership, and group membership of system files and commands with the following command:

# rpm -Va | grep '^.M'

If there is any output from the command indicating that the ownership or group of a system file or command, or a system file, has permissions less restrictive than the default, this is a finding.

Fix Text (F-78201r3_fix)
Run the following command to determine which package owns the file: # rpm -qf Reset the permissions of files within a package with the following command: #rpm --setperms Reset the user and group ownership of files within a package with the following command: #rpm --setugids