← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-823

CAT II (Medium)

The services file must be owned by root or bin.

Rule ID

SV-45763r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000225

Discussion

Failure to give ownership of sensitive files or utilities to root or bin provides the designated owner and unauthorized users with the potential to access sensitive information or change the system configuration possibly weakening the system's security posture.

Check Content

Check the ownership of the services file.

Procedure:
# ls -lL /etc/services

If the services file is not owned by root or bin, this is a finding.

Fix Text

Change the ownership of the services file to root or bin.

Procedure:
# chown root /etc/services