Detections
Analytics

1.157 RHEL-10-400350

Information

RHEL 10 must enforce "root" ownership of the "/boot/grub2/grub.cfg" file.

GROUP ID: V-281087RULE ID: SV-281087r1165616

The " /boot/grub2/grub.cfg" file stores sensitive system configuration. Protection of this file is critical for system security.

Solution

Configure RHEL 10 to enforce ownership of the "/boot/grub2/grub.cfg" file.

Change the owner of the "/boot/grub2/grub.cfg" file to "root" by running the following command:

$ sudo chown root /boot/grub2/grub.cfg

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-281087r1165616_rule, STIG-ID|RHEL-10-400350, Vuln-ID|V-281087

Plugin: Unix

Control ID: 22d606d21f6eb842df4dd10e73c608d1e5bf2ab5ddc246105d24523725a87067