Detections
Analytics

7.1.12 Ensure no files or directories without an owner and a group exist

Information

Administrators may delete users or groups from the system and neglect to remove all files and/or directories owned by those users or groups.

A new user or group who is assigned a deleted user's user ID or group ID may then end up "owning" a deleted user or group's files, and thus have more access on the system than was intended.

Solution

Remove or set ownership and group ownership of these files and/or directories to an active user on the system as appropriate.

See Also

https://workbench.cisecurity.org/benchmarks/19886

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|CM-6b., 800-53|MP-2, CAT|II, CSCv7|14.6, Rule-ID|SV-230326r627750_rule, Rule-ID|SV-230327r627750_rule, STIG-ID|RHEL-08-010780, STIG-ID|RHEL-08-010790, Vuln-ID|V-230326, Vuln-ID|V-230327

Plugin: Unix

Control ID: da649f429de9f05e23219a832d3af742268f74b0a38fbe5275159dc80aa96d1e