Title

System files, programs, and directories must be group-owned by a system group. (Cat II impact)

Discussion

Restricting permissions will protect the files from unauthorized modification.

Check Content

Check the group ownership of system files, programs, and directories. Procedure: # ls -lLa /etc /bin /usr/bin /usr/lbin /usr/ucb /sbin /usr/sbin If any system file, program, or directory is not group-owned by a system group, this is a finding.

Fix Text

Change the group owner of system files to a system group. Procedure: # chgrp root /path/to/system/file (System groups other than root may be used.)

Additional Identifiers

Rule ID: SV-796r2_rule

Vulnerability ID: V-796

Group Title: GEN001240

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.