← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-795

CAT II (Medium)

All system files, programs, and directories must be owned by a system account.

Rule ID

SV-44941r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-001499

Discussion

Restricting permissions will protect the files from unauthorized modification.

Check Content

Check the ownership of system files, programs, and directories.

Procedure:
# ls -lLa /etc /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin

If any of the system files, programs, or directories are not owned by a system account, this is a finding.

Fix Text

Change the owner of system files, programs, and directories to a system account.

Procedure:
# chown root /some/system/file

(A different system user may be used in place of root.)