1.5.2 Set Permissions on /etc/grub.conf

Information

Set permission on the /etc/grub.conf file to read and write for root only.

Rationale:

Setting the permissions to read and write for root only prevents non-root users from seeing the boot parameters or changing them. Non-root users who read the boot parameters may be able to identify weaknesses in security upon boot and be able to exploit them.

Solution

Run the following command to remove excess permissions from /etc/grub.conf

# chmod og-rwx /etc/grub.conf

Default Value:

OS Default: No

See Also

https://workbench.cisecurity.org/files/3096