Title

All AIX files and directories must have a valid group owner. (Cat II impact)

Discussion

Failure to restrict system access to authenticated users negatively impacts operating system security.

Check Content

Determine if any file on the system does not have a valid group owner using command: # find / -nogroup -print If any such files are found, this is a finding.

Fix Text

Change the group owner for each file without a valid group owner using command: # chgrp <a-valid-group> /tmp/a-file-without-a-valid-group-owner

Additional Identifiers

Rule ID: SV-215420r508663_rule

Vulnerability ID: V-215420

Group Title: SRG-OS-000480-GPOS-00227

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.