V-931

Discussion

Failure to give ownership of sensitive files or directories to root provides the designated owner and possible unauthorized users with the potential to access sensitive information or change system configuration which could weaken the system's security posture.

Check Content

Check if the nfs-kernel-server package is installed.  It contains the exportfs command as well as the nfsserver process itself.

# rpm –q nfs-kernel-server
If the package is not installed, this check does not apply.  If it is installed, check for NFS exported file systems.

Procedure:
# cat /etc/exports
For each file system displayed, check the ownership.

# ls -lLa <exported file system path>

If the files and directories are not owned by root, this is a finding.