RHEL-09-212025 - RHEL 9 /boot/grub2/grub.cfg file must be group-owned by root.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The 'root' group is a highly privileged group. Furthermore, the group-owner of this file should not have any access privileges anyway.

Solution

Change the group of the file /boot/grub2/grub.cfg to root by running the following command:

$ sudo chgrp root /boot/grub2/grub.cfg

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_9_V1R2_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000366, Rule-ID|SV-257790r925357_rule, STIG-ID|RHEL-09-212025, Vuln-ID|V-257790

Plugin: Unix

Control ID: 6113d079ffaf5e22b4a530d9f15c18bae24e79ac79d810ed355559671c371b4e