Check: UBTU-16-010700
Canonical Ubuntu 16.04 LTS STIG:
UBTU-16-010700
(in versions v2 r3 through v1 r3)
Title
All files and directories must have a valid owner. (Cat II impact)
Discussion
Unowned files and directories may be unintentionally inherited if a user is assigned the same User Identifier "UID" as the UID of the un-owned files.
Check Content
Verify all files and directories on the Ubuntu operating system have a valid owner. Check the owner of all files and directories with the following command: # sudo find / -nouser If any files on the system do not have an assigned owner, this is a finding.
Fix Text
Either remove all files and directories from the system that do not have a valid user, or assign a valid user to all unowned files and directories on the Ubuntu operating system with the "chown" command: # sudo chown <user> <file>
Additional Identifiers
Rule ID: SV-215002r610931_rule
Vulnerability ID: V-215002
Group Title: SRG-OS-000480-GPOS-00227
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-002165 |
The information system enforces organization-defined discretionary access control policies over defined subjects and objects. |
Controls
Number | Title |
---|---|
AC-3 (4) |
Discretionary Access Control |