UCF STIG Viewer Logo

The /etc/sysctl.conf file must be group-owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4335 GEN000000-LNX00500 SV-4335r2_rule ECLP-1 Medium
Description
The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the system's security.
STIG Date
VMware ESX 3 Server 2016-05-13

Details

Check Text ( C-28801r1_chk )
Check /etc/sysctl.conf group ownership:
# ls -lL /etc/sysctl.conf
If /etc/sysctl.conf is not group-owned by root, this is a finding.
Fix Text (F-4246r2_fix)
Use the chgrp command to change the group owner of /etc/sysctl.conf to root:
# chgrp root /etc/sysctl.conf