Title

All system files, programs, and directories must be owned by a system account. (Cat II impact)

Discussion

Restricting permissions will protect the files from unauthorized modification.

Check Content

Check the ownership of system files, programs, and directories. Procedure: # ls -lLa /etc /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin If any of the system files, programs, or directories are not owned by a system account, this is a finding.

Fix Text

Change the owner of system files, programs, and directories to a system account. Procedure: # chown root /some/system/file (A different system user may be used in place of root.)

Additional Identifiers

Rule ID: SV-44941r1_rule

Vulnerability ID: V-795

Group Title: GEN001220

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.