Detections
Analytics

1.94 ALMA-09-013330

Information

The /boot/grub2/grub.cfg file must be group-owned by root.

GROUP ID: V-269197
RULE ID: SV-269197r1050079

The "root" group is a highly privileged group. Furthermore, the group-owner of this file should not have any access privileges anyway.

Solution

Change the group of the file /boot/grub2/grub.cfg to root by running the following command:

$ chgrp root /boot/grub2/grub.cfg

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269197r1050079_rule, STIG-ID|ALMA-09-013330, Vuln-ID|V-269197

Plugin: Unix

Control ID: 738f2750200a9f4a6969f98cd48f6cca555aa8032ea0a3f7597a66ffa6879987