← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-796

CAT II (Medium)

System files, programs, and directories must be group-owned by a system group.

Rule ID

SV-44944r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-001499

Discussion

Restricting permissions will protect the files from unauthorized modification.

Check Content

Check the group-ownership of system files, programs, and directories.

Procedure:
#  ls –lLa /etc /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin

If any system file, program, or directory is not owned by a system group, this is a finding.

Fix Text

Change the group-owner of system files to a system group.

Procedure:
# chgrp root /path/to/system/file

(System groups other than root may be used.)