Detections
Analytics

1.60 SOL-11.1-020380

Information

System start-up files must only execute programs owned by a privileged UID or an application.

GROUP ID: V-216072RULE ID: SV-216072r959010

System start-up files executing programs owned by other than root (or another privileged user) or an application indicates the system may have been compromised.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Change the ownership of the file executed from system startup scripts to root, bin, or sys.

chown root

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216072r959010_rule, STIG-ID|SOL-11.1-020380, Vuln-ID|V-216072

Plugin: Unix

Control ID: 03bba8d82cfbc1216fee48c290734786435de1db2d4e3b631d96f07150c8025b