Title

All files and directories must have a valid group-owner. (Cat II impact)

Discussion

Files without a valid group-owner may be unintentionally inherited if a group is assigned the same GID as the GID of the files without a valid group-owner.

Check Content

Search the system for files without a valid group-owner. # find / -nogroup -print If any files are found, this is a finding.

Fix Text

Change the group owner for each file without a valid group owner. # chgrp <a-valid-group> /tmp/a-file-without-a-valid-group-owner

Additional Identifiers

Rule ID:

Vulnerability ID: V-22312

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.