Title

System files, programs, and directories must be group-owned by a system group. (Cat II impact)

Discussion

Restricting permissions will protect the files from unauthorized modification.

Check Content

Open a terminal session and use the following command to verify group ownership of system files, programs, and directories. ls -lLa /usr/bin If any system file, program, or directory is not owned by a system group, this is a finding.

Fix Text

Open a terminal session and enter the following command to change the group ownership of system files, programs, and directories to a system group. chgrp wheel <path/filename>

Additional Identifiers

Rule ID: SV-37989r1_rule

Vulnerability ID: V-796

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.