UCF STIG Viewer Logo

System files, programs, and directories must be group-owned by a system group.


Overview

Finding ID Version Rule ID IA Controls Severity
V-796 GEN001240 SV-44944r1_rule Medium
Description
Restricting permissions will protect the files from unauthorized modification.
STIG Date
SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide 2018-09-19

Details

Check Text ( C-42372r1_chk )
Check the group-ownership of system files, programs, and directories.

Procedure:
# ls –lLa /etc /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin

If any system file, program, or directory is not owned by a system group, this is a finding.
Fix Text (F-38368r1_fix)
Change the group-owner of system files to a system group.

Procedure:
# chgrp root /path/to/system/file

(System groups other than root may be used.)