The Oracle Linux operating system must be configured so that all files and directories have a valid owner.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-221724 | OL07-00-020320 | SV-221724r991589_rule | Medium |
| Description |
| Unowned files and directories may be unintentionally inherited if a user is assigned the same User Identifier (UID) as the UID of the un-owned files. |
| STIG | Date |
| Oracle Linux 7 Security Technical Implementation Guide | 2024-08-26 |
Details
| Check Text (C-23439r419244_chk) |
| Verify all files and directories on the system have a valid owner. Check the owner of all files and directories with the following command: Note: The value after -fstype must be replaced with the filesystem type. XFS is used as an example. # find / -fstype xfs -nouser If any files on the system do not have an assigned owner, this is a finding. |
| Fix Text (F-23428r419245_fix) |
| Either remove all files and directories from the system that do not have a valid user, or assign a valid user to all unowned files and directories on the system with the "chown" command: # chown <user> <file> |