STIGQter: STIG Summary: Riverbed NetIM OS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

Ubuntu OS must have system commands owned by "root" or a system account.

DISA Rule

SV-275589r1147817_rule

Vulnerability Number

V-275589

Group Title

SRG-OS-000259-GPOS-00100

Rule Version

RIIM-OS-232050

Severity

CAT II

CCI(s)

• CCI-001499 - Limit privileges to change software resident within software libraries.

Weight

10

Fix Recommendation

Configure Ubuntu OS commands and their respective parent directories to be protected from unauthorized access. Run the following command, replacing "<command_name>" with any system command not owned by "root" or a required system account:

$ sudo chown root <command_name>

Check Contents

Verify the system commands contained in the following directories are owned by "root", or a required system account, by using the following command:

$ sudo find /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin ! -user root -type f -exec stat -c "%n %U" '{}' \;

If any system commands are returned and are not owned by a required system account, this is a finding.

Vulnerability Number

V-275589

Documentable

False

Rule Version

RIIM-OS-232050

Severity Override Guidance

Verify the system commands contained in the following directories are owned by "root", or a required system account, by using the following command:

$ sudo find /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin ! -user root -type f -exec stat -c "%n %U" '{}' \;

If any system commands are returned and are not owned by a required system account, this is a finding.

Check Content Reference

M

Target Key

5706