Red Hat Enterprise Linux 9 Security Technical Implementation Guide

The Red Hat Enterprise Linux 9 Security Technical Implementation Guide (V2 R9) has 445 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

445STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R9

ArchivedPublished Wed Jul 01 2026

RHEL 9 cron configuration files directory must be group-owned by root.

Red Hat Enterprise Linux 9 Security Technical Implementation Guide

Assessment Title

Rule Text

RHEL 9 cron configuration files directory must be group-owned by root.

Description

Discussion Text

Service configuration files enable or disable features of their respective services that if configured incorrectly can lead to insecure and vulnerable configurations; therefore, service configuration files should be owned by the correct group to prevent unauthorized changes.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-257927

Rule

SV-257927r991589_rule

Severity

medium

Rule Version

RHEL-09-232235

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the group ownership of all cron configuration files with the following command:

$ stat -c "%G %n" /etc/cron*

root /etc/cron.d
root /etc/cron.daily
root /etc/cron.deny
root /etc/cron.hourly
root /etc/cron.monthly
root /etc/crontab
root /etc/cron.weekly

If any crontab is not group owned by root, this is a finding.

Implementation Procedure

Fix Text

Configure any cron configuration not group-owned by root with the following command:

$ sudo chgrp root [cron config file]

STIG check 149 of 445 in the Red Hat Enterprise Linux 9 STIG checklist

← Previous · V-257926RHEL 9 cron configuration files directory must be owned by root.Next · V-257928 →All RHEL 9 world-writable directories must be owned by root, sys, bin, or an application user.