Detections
Analytics

SOL-11.1-020380 - System start-up files must only execute programs owned by a privileged UID or an application.

Information

System start-up files executing programs owned by other than root (or another privileged user) or an application indicates the system may have been compromised.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Change the ownership of the file executed from system startup scripts to root, bin, or sys.

# chown root <executed file>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_x86_V3R6_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216072r959010_rule, STIG-ID|SOL-11.1-020380, STIG-Legacy|SV-74273, STIG-Legacy|V-59843, Vuln-ID|V-216072

Plugin: Unix

Control ID: a2e28fe80efce2ea47cd5ecdbbb0160e132ed173aefc7a51e244131c1d2c8c49