STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS library directories must be owned by root.

DISA Rule

SV-270698r1101751_rule

Vulnerability Number

V-270698

Group Title

SRG-OS-000259-GPOS-00100

Rule Version

UBTU-24-300008

Severity

CAT II

CCI(s)

• CCI-001499 - Limit privileges to change software resident within software libraries.

Weight

10

Fix Recommendation

Configure the library files and their respective parent directories to be protected from unauthorized access. Run the following command:

$ sudo find /lib /lib64 /usr/lib /usr/lib64 ! -user root -type d -exec chown root '{}' \;

Check Contents

Verify the systemwide shared library directories "/lib", "/lib64", "/usr/lib", and "/usr/lib64" are owned by root with the following command:

$ sudo find /lib /lib64 /usr/lib /usr/lib64 ! -user root -type d -exec stat -c "%n %U" '{}' \;

If any systemwide library directory is returned, this is a finding.

Vulnerability Number

V-270698

Documentable

False

Rule Version

UBTU-24-300008

Severity Override Guidance

Verify the systemwide shared library directories "/lib", "/lib64", "/usr/lib", and "/usr/lib64" are owned by root with the following command:

$ sudo find /lib /lib64 /usr/lib /usr/lib64 ! -user root -type d -exec stat -c "%n %U" '{}' \;

If any systemwide library directory is returned, this is a finding.

Check Content Reference

M

Target Key

5673