Detections
Analytics

GEN003770 - The services file must be group-owned by root, bin, sys, or system.

Information

Failure to give ownership of system configuration files to root or a system group provides the designated owner and unauthorized users with the potential to change the system configuration possibly weakening the system's security posture.

Solution

Change the group-owner of the services file.

Procedure:
# chgrp root /etc/services

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22427, Rule-ID|SV-37425r2_rule, STIG-ID|GEN003770, Vuln-ID|V-22427

Plugin: Unix

Control ID: 2f6a86f6ea823ccff8983eac74aa8eaf8ae45b412d7ed022dbbec74cce1603e3