| Restricting permissions will protect system command files from unauthorized modification. System command files include files present in directories used by the operating system for storing default system executables and files present in directories included in the system's default executable search paths. Applicable, but permanent not-a-finding - Not a General Purpose (GP) OS. VMware's ESXi-v5 is a multi-user kernel where all users are "administrator" with either: Administrator with Full and partial (configurable) privileges, Read-only, or No Access. In this case, the file owner, group-owner and mode(s) have no meaning. |
