Title

All files and directories must have a valid group owner. (Cat II impact)

Discussion

Files without a valid group owner may be unintentionally inherited if a group is assigned the same GID as the GID of the files without a valid group owner.

Check Content

Determine if any file on the system does not have a valid group owner. If any such files are found, this is a finding.

Fix Text

Change the group owner for each file without a valid group owner. # chgrp <a-valid-group> /tmp/a-file-without-a-valid-group-owner

Additional Identifiers

Rule ID: SV-25959r1_rule

Vulnerability ID: V-22312

Group Title: GEN001170

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.