Detections
Analytics

GEN002210 - All shell files must be group-owned by root, bin, sys, or system.

Information

If shell files are group-owned by users other than root or a system group, they could be modified by intruders or malicious users to perform unauthorized actions.

Solution

Change the group-owner of the shell to root, bin, sys, or system.

Procedure:
# chgrp root <shell>

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22365, Rule-ID|SV-37399r1_rule, STIG-ID|GEN002210, Vuln-ID|V-22365

Plugin: Unix

Control ID: d1886c5171ff93a9508b40f2eaa967ae54f3920b8072e063c85ad4abc6129720