Title

All system files, programs, and directories must be owned by a system account. (Cat II impact)

Discussion

Restricting permissions will protect the files from unauthorized modification.

Check Content

Open a terminal session and enter the following command to verify the ownership of system files, programs, and directories. Procedure: ls -lLa/bin /usr/bin /sbin /usr/sbin If any of the system files, programs, or directories are not owned by a system account, this is a finding.

Fix Text

Open a terminal session and enter the following command to change the owner of system files, programs, and directories to a system account. chown root <path/filename>

Additional Identifiers

Rule ID: SV-37988r1_rule

Vulnerability ID: V-795

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.