The system boot loader configuration file(s) must have mode 0600 or less permissive.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-240409 | VRAU-SL-000430 | SV-240409r670968_rule | Medium |
| Description |
|---|
| File permissions more permissive than 0600 on boot loader configuration files could allow an unauthorized user to view or modify sensitive information pertaining to system boot instructions. |
| STIG | Date |
|---|---|
| VMware vRealize Automation 7.x SLES Security Technical Implementation Guide | 2021-06-24 |
Details
| Check Text ( C-43642r670966_chk ) |
|---|
| Check the /boot/grub/menu.lst file: # stat /boot/grub/menu.lst If /boot/grub/menu.lst has a mode more permissive than "0600", this is a finding. |
| Fix Text (F-43601r670967_fix) |
|---|
| Change the mode of the menu.lst file to "0600": # chmod 0600 /boot/grub/menu.lst |