← Back to VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

V-240411

CAT II (Medium)

The system boot loader configuration file(s) must be group-owned by root, bin, sys, or system.

Rule ID

SV-240411r670974_rule

STIG

VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000213

Discussion

The system's boot loader configuration files are critical to the integrity of the system and must be protected. Unauthorized modifications resulting from improper group-ownership may compromise the boot loader configuration.

Check Content

Check /boot/grub/menu.lst ownership:

# stat /boot/grub/menu.lst

If the group-owner of the file is not "root", "bin", "sys", or "system", this is a finding.

Fix Text

Change the group-ownership of the file:

# chgrp root /boot/grub/menu.lst