STIGQter: STIG Summary: VMware ESX 3 Server Version: 1 Release: 2 Benchmark Date: 22 Jul 2016: All system start-up files must be group-owned by root, sys, bin, other, or system.

DISA Rule

SV-4090r2_rule

Vulnerability Number

V-4090

Group Title

GEN001680

Rule Version

GEN001680

Severity

CAT II

CCI(s)

• CCI-000225 - The organization employs the concept of least privilege, allowing only authorized accesses for users (and processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions.

Weight

10

Fix Recommendation

Change the group ownership of the run control script(s) with incorrect group ownership.

Procedure:
# chgrp root <run control script>

Check Contents

Check the group ownership of system run control scripts. If any are group-owned by a user other than root, sys, bin, other, or the system default, this is a finding.

Vulnerability Number

V-4090

Documentable

False

Rule Version

GEN001680

Severity Override Guidance

Check the group ownership of system run control scripts. If any are group-owned by a user other than root, sys, bin, other, or the system default, this is a finding.

Check Content Reference

M

Responsibility

System Administrator

Target Key

1386

Comments