Title

System files, programs, and directories must be group-owned by a system group. (Cat II impact)

Discussion

Restricting permissions will protect the files from unauthorized modification.

Check Content

Check the group ownership of system files, programs, and directories. Procedure: # ls -lLa /etc /bin /usr/bin /usr/lbin /usr/usb /sbin /usr/sbin If any system file, program, or directory is not owned by a system group, this is a finding.

Fix Text

Change the group owner of system files to a system group. Procedure: # chgrp root <path>/<system file> (System groups other than root may be used.)

Additional Identifiers

Rule ID: SV-38467r1_rule

Vulnerability ID: V-796

Group Title: GEN001240

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.