STIGQter: STIG Summary: Riverbed NetIM OS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

Ubuntu OS must be configured so that the "journalctl" command is owned by "root".

DISA Rule

SV-275599r1147847_rule

Vulnerability Number

V-275599

Group Title

SRG-OS-000206-GPOS-00084

Rule Version

RIIM-OS-232100

Severity

CAT II

CCI(s)

• CCI-001320 - Defines the maximum fraction or percentage of mean time to failure (MTTF) used to determine when system components are taken out of service by transferring component responsibilities to substitute components.

Weight

10

Fix Recommendation

Configure "journalctl" to be owned by "root":

$ sudo chown root /usr/bin/journalctl

Check Contents

Verify that the "journalctl" command is owned by "root" by using the following command:

$ sudo find /usr/bin/journalctl -exec stat -c "%n %U" {} \;
/usr/bin/journalctl root

If "journalctl" is not owned by "root", this is a finding.

Vulnerability Number

V-275599

Documentable

False

Rule Version

RIIM-OS-232100

Severity Override Guidance

Verify that the "journalctl" command is owned by "root" by using the following command:

$ sudo find /usr/bin/journalctl -exec stat -c "%n %U" {} \;
/usr/bin/journalctl root

If "journalctl" is not owned by "root", this is a finding.

Check Content Reference

M

Target Key

5706