Title

The /etc/group file must be owned by root. (Cat II impact)

Discussion

The /etc/group file is critical to system security and must be owned by a privileged user. The group file contains a list of system groups and associated information.

Check Content

Verify the /etc/group file is owned by root. Procedure: # ls -l /etc/group If the file is not owned by root, this is a finding.

Fix Text

Change the owner of the /etc/group file to root. # chown root /etc/group

Additional Identifiers

Rule ID: SV-226518r603265_rule

Vulnerability ID: V-226518

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.