The system's boot loader configuration file(s) must have mode 0600 or less permissive.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-4250 | GEN008720 | SV-4250r2_rule | ECLP-1 | Medium |
| Description |
|---|
| File permissions greater than 0600 on boot loader configuration files could allow an unauthorized user to view or modify sensitive information pertaining to system boot instructions. |
| STIG | Date |
|---|---|
| UNIX SRG | 2013-03-26 |
Details
| Check Text ( C-2060r2_chk ) |
|---|
| Check /etc/grub.conf permissions. # ls -lL /etc/grub.conf If /etc/grub.conf has a mode more permissive than 0600, this is a finding. |
| Fix Text (F-25796r1_fix) |
|---|
| Change the mode of the grub.conf file to 0600. # chmod 0600 /etc/grub.conf |