Detections
Analytics

1.60 SOL-11.1-020380

Information

System start-up files must only execute programs owned by a privileged UID or an application.

GROUP ID: V-216307
RULE ID: SV-216307r959010

System start-up files executing programs owned by other than root (or another privileged user) or an application indicates the system may have been compromised.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Change the ownership of the file executed from system startup scripts to root, bin, or sys.

# chown root <executed file>

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216307r959010_rule, STIG-ID|SOL-11.1-020380, Vuln-ID|V-216307

Plugin: Unix

Control ID: 0836423a5e0b950f44fa5a6ba8f78e2cd56a99a7e7a611ea81d078b2994b5948