Red Hat Enterprise Linux 7 Security Technical Implementation Guide

The Red Hat Enterprise Linux 7 Security Technical Implementation Guide (V3 R15) has 244 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

244STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R15

CurrentPublished Wed Jul 24 2024

The Red Hat Enterprise Linux operating system must be configured so that all files and directories have a valid group owner.

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

Assessment Title

Rule Text

The Red Hat Enterprise Linux operating system must be configured so that all files and directories have a valid group owner.

Description

Discussion Text

Files without a valid group owner may be unintentionally inherited if a group is assigned the same Group Identifier (GID) as the GID of the files without a valid group owner.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-204464

Rule

SV-204464r991589_rule

Severity

medium

Rule Version

RHEL-07-020330

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify all files and directories on the system have a valid group.

Check the owner of all files and directories with the following command:

Note: The value after -fstype must be replaced with the filesystem type. XFS is used as an example.

# find / -fstype xfs -nogroup

If any files on the system do not have an assigned group, this is a finding.

Implementation Procedure

Fix Text

Either remove all files and directories from the system that do not have a valid group, or assign a valid group to all files and directories on the system with the "chgrp" command:

# chgrp <group> <file>

STIG check 70 of 244 in the Red Hat Enterprise Linux 7 STIG checklist

← Previous · V-204463The Red Hat Enterprise Linux operating system must be configured so that all files and directories have a valid owner.Next · V-204466 →The Red Hat Enterprise Linux operating system must be configured so that all local interactive user accounts, upon creation, are assigned a home directory.