UCF STIG Viewer Logo

All system start-up files must be group-owned by root, sys, or bin.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4090 GEN001680 SV-27213r1_rule ECLP-1 Medium
Description
If system start-up files do not have a group owner of root or a system group, the files may be modified by malicious users or intruders.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-28191r1_chk )
Check run control scripts' group ownership.

Procedure:
# ls -lL /etc/rc* /etc/init.d

If any run control script is not group-owned by root, sys, or bin, this is a finding.
Fix Text (F-24459r1_fix)
Change the group ownership of the run control script(s) with incorrect group ownership.

Procedure:
# chgrp root