SV-261301r1184397_rule
V-261301
SRG-OS-000259-GPOS-00100
SLEM-05-232080
CAT II
10
Configure the system commands to be protected from unauthorized access. Run the following command:
> sudo transactional-update shell
> sudo find -L /bin /sbin /usr/bin /usr/sbin /bin /sbin /usr/bin /usr/sbin ! -user root -type d -exec chown root '{}' \;
> exit
> sudo reboot
Verify the system command directories are owned by root with the following command:
> find -L /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin ! -user root -type d -exec stat -c "%n %U" '{}' \;
If any system command directories are returned, this is a finding.
V-261301
False
SLEM-05-232080
Verify the system command directories are owned by root with the following command:
> find -L /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin ! -user root -type d -exec stat -c "%n %U" '{}' \;
If any system command directories are returned, this is a finding.
M
5596