GEN001680 - All system start-up files must be group-owned by root, sys, bin, other, or system.

Information

If system start-up files do not have a group owner of root or a system group, the files may be modified by malicious users or intruders.

Solution

Change the group ownership of the run control script(s) with incorrect group ownership.

Procedure:
# chgrp root <run control script>
# find /etc -name '[SK][0-9]*'|xargs stat -L -c %G:%n|egrep -v '^(root|sys|bin|other):'|cut -d: -f2|xargs chgrp root

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Audit Name: DISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-4090, Rule-ID|SV-37269r1_rule, STIG-ID|GEN001680, Vuln-ID|V-4090

Plugin: Unix

Control ID: 403c82b0483112e1d813463a8734297173d0c2c494c0970c19ccfcd5096d4b70