STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must be configured so that system commands are group-owned by root or a system account.

DISA Rule

SV-281038r1184683_rule

Vulnerability Number

V-281038

Group Title

SRG-OS-000259-GPOS-00100

Rule Version

RHEL-10-400105

Severity

CAT II

CCI(s)

• CCI-001499 - Limit privileges to change software resident within software libraries.

Weight

10

Fix Recommendation

Configure RHEL 10 so that the system commands are protected from unauthorized access.

Run the following command, replacing "[FILE]" with any system command file not group-owned by "root" or a required system account.

$ sudo chgrp root [FILE]

Check Contents

Verify RHEL 10 is configured so that the system commands contained in the following directories are group-owned by "root", or a required system account, with the following command:

$ sudo find -L /bin /sbin /usr/bin /usr/sbin /usr/libexec /usr/local/bin /usr/local/sbin ! -group root -exec stat -L -c "%G %n" {} \;

If any system commands are returned and are not group-owned by "root" or a required system account, this is a finding.

Vulnerability Number

V-281038

Documentable

False

Rule Version

RHEL-10-400105

Severity Override Guidance

Verify RHEL 10 is configured so that the system commands contained in the following directories are group-owned by "root", or a required system account, with the following command:

$ sudo find -L /bin /sbin /usr/bin /usr/sbin /usr/libexec /usr/local/bin /usr/local/sbin ! -group root -exec stat -L -c "%G %n" {} \;

If any system commands are returned and are not group-owned by "root" or a required system account, this is a finding.

Check Content Reference

M

Target Key

5733