STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must be configured so that cron configuration files directories are group-owned by root.

DISA Rule

SV-281044r1184618_rule

Vulnerability Number

V-281044

Group Title

SRG-OS-000080-GPOS-00048

Rule Version

RHEL-10-400135

Severity

CAT II

CCI(s)

• CCI-000213 - Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

10

Fix Recommendation

Configure RHEL 10 so that any cron configuration file directories are group-owned by "root" with the following command:

$ sudo chgrp root [cron config file]

Check Contents

Verify RHEL 10 group ownership of all cron configuration files with the following command:

$ stat -c "%G %n" /etc/cron*
root /etc/cron.d
root /etc/cron.daily
root /etc/cron.deny
root /etc/cron.hourly
root /etc/cron.monthly
root /etc/crontab
root /etc/cron.weekly

If any crontab is not group-owned by "root", this is a finding.

Vulnerability Number

V-281044

Documentable

False

Rule Version

RHEL-10-400135

Severity Override Guidance

Verify RHEL 10 group ownership of all cron configuration files with the following command:

$ stat -c "%G %n" /etc/cron*
root /etc/cron.d
root /etc/cron.daily
root /etc/cron.deny
root /etc/cron.hourly
root /etc/cron.monthly
root /etc/crontab
root /etc/cron.weekly

If any crontab is not group-owned by "root", this is a finding.

Check Content Reference

M

Target Key

5733