Detections
Analytics

GEN001680 - All system start-up files must be group-owned by sys, bin, other, or system.

Information

If system start-up files do not have a group owner of a system group, the files may be modified by malicious users or intruders.

Solution

Change the group ownership of the run control script(s) with incorrect group ownership.
Procedure:
# chgrp sys <run control script>

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-27216r1_rule, STIG-ID|GEN001680, Vuln-ID|V-4090

Plugin: Unix

Control ID: 4c28efe680fd3acd5a2128e77fe3ccbefb98209fa35cea0bb4d61f5d0d7d73c6