UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

System files, programs, and directories must be group-owned by a system group.


Overview

Finding ID Version Rule ID IA Controls Severity
V-796 GEN001240 SV-796r2_rule ECLP-1 Medium
Description
Restricting permissions will protect the files from unauthorized modification.
STIG Date
SOLARIS 10 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2017-01-05

Details

Check Text ( C-8015r2_chk )
Check the group ownership of system files, programs, and directories.

Procedure:
# ls -lLa /etc /bin /usr/bin /usr/lbin /usr/ucb /sbin /usr/sbin

If any system file, program, or directory is not group-owned by a system group, this is a finding.
Fix Text (F-950r2_fix)
Change the group owner of system files to a system group.

Procedure:
# chgrp root /path/to/system/file

(System groups other than root may be used.)