V-4335

CAT II (Medium)

The /etc/sysctl.conf file must be group-owned by root.

Rule ID

SV-44656r1_rule

STIG

Version

V1R12

CCIs

The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the system's security.

Check /etc/sysctl.conf group ownership: 
# ls -lL /etc/sysctl.conf 
If /etc/sysctl.conf is not group-owned by root, this is a finding.

Use the chgrp command to change the group owner of /etc/sysctl.conf to root:
# chgrp root /etc/sysctl.conf