Red Hat Enterprise Linux 7 Security Technical Implementation Guide

The Red Hat Enterprise Linux 7 Security Technical Implementation Guide (V3 R15) has 244 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

244STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R15

CurrentPublished Wed Jul 24 2024

The Red Hat Enterprise Linux operating system must be configured so that all files and directories have a valid owner.

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

Assessment Title

Rule Text

The Red Hat Enterprise Linux operating system must be configured so that all files and directories have a valid owner.

Description

Discussion Text

Unowned files and directories may be unintentionally inherited if a user is assigned the same User Identifier "UID" as the UID of the un-owned files.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-204463

Rule

SV-204463r991589_rule

Severity

medium

Rule Version

RHEL-07-020320

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify all files and directories on the system have a valid owner.

Check the owner of all files and directories with the following command:

Note: The value after -fstype must be replaced with the filesystem type. XFS is used as an example.

# find / -fstype xfs -nouser

If any files on the system do not have an assigned owner, this is a finding.

Implementation Procedure

Fix Text

Either remove all files and directories from the system that do not have a valid user, or assign a valid user to all unowned files and directories on the system with the "chown" command:

# chown <user> <file>

STIG check 69 of 244 in the Red Hat Enterprise Linux 7 STIG checklist

← Previous · V-204462The Red Hat Enterprise Linux operating system must be configured so that the root account must be the only account having unrestricted access to the system.Next · V-204464 →The Red Hat Enterprise Linux operating system must be configured so that all files and directories have a valid group owner.