All system files, programs, and directories must be owned by a system account.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-795	GEN001220	SV-44941r1_rule		Medium

Description
Restricting permissions will protect the files from unauthorized modification.

STIG	Date
SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide	2018-09-19

Details

Check Text ( C-42371r1_chk )
Check the ownership of system files, programs, and directories. Procedure: # ls -lLa /etc /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin If any of the system files, programs, or directories are not owned by a system account, this is a finding.

Fix Text (F-38366r1_fix)
Change the owner of system files, programs, and directories to a system account. Procedure: # chown root /some/system/file (A different system user may be used in place of root.)