Rules Related To 'setup'

Component overview

Relevant packages:

Relevant groups:

None

Changelog:

No changes recorded.

Relevant rules:

Rule details

Verify Group Who Owns group File

file_groupowner_etc_group

Description

To properly set the group owner of /etc/group, run the command: 

$ sudo chgrp root /etc/group

Rationale

The /etc/group file contains information regarding groups that are configured on the system. Protection of this file is important for system security.

Verify Group Who Owns gshadow File

file_groupowner_etc_gshadow

Description

To properly set the group owner of /etc/gshadow, run the command: 

$ sudo chgrp shadow /etc/gshadow

Rationale

The /etc/gshadow file contains group password hashes. Protection of this file is critical for system security.

Verify Group Ownership of Message of the Day Banner

file_groupowner_etc_motd

Description

To properly set the group owner of /etc/motd, run the command: 

$ sudo chgrp root /etc/motd

Rationale

Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
Proper group ownership will ensure that only root user can modify the banner.

Verify Group Who Owns passwd File

file_groupowner_etc_passwd

Description

To properly set the group owner of /etc/passwd, run the command: 

$ sudo chgrp root /etc/passwd

Rationale

The /etc/passwd file contains information about the users that are configured on the system. Protection of this file is critical for system security.

Verify Group Who Owns shadow File

file_groupowner_etc_shadow

Description

To properly set the group owner of /etc/shadow, run the command: 

$ sudo chgrp shadow /etc/shadow

Rationale

The /etc/shadow file stores password hashes. Protection of this file is critical for system security.

Verify User Who Owns group File

file_owner_etc_group

Description

To properly set the owner of /etc/group, run the command: 

$ sudo chown root /etc/group

Rationale

The /etc/group file contains information regarding groups that are configured on the system. Protection of this file is important for system security.

Verify User Who Owns gshadow File

file_owner_etc_gshadow

Description

To properly set the owner of /etc/gshadow, run the command: 

$ sudo chown root /etc/gshadow

Rationale

The /etc/gshadow file contains group password hashes. Protection of this file is critical for system security.

Verify ownership of Message of the Day Banner

file_owner_etc_motd

Description

To properly set the owner of /etc/motd, run the command: 

$ sudo chown root /etc/motd

Rationale

Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
Proper ownership will ensure that only root user can modify the banner.

Verify User Who Owns passwd File

file_owner_etc_passwd

Description

To properly set the owner of /etc/passwd, run the command: 

$ sudo chown root /etc/passwd

Rationale

The /etc/passwd file contains information about the users that are configured on the system. Protection of this file is critical for system security.

Verify User Who Owns shadow File

file_owner_etc_shadow

Description

To properly set the owner of /etc/shadow, run the command: 

$ sudo chown root /etc/shadow

Rationale

The /etc/shadow file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security. Failure to give ownership of this file to root provides the designated owner with access to sensitive information which could weaken the system security posture.

Verify Permissions on group File

file_permissions_etc_group

Description

To properly set the permissions of /etc/group, run the command: 

$ sudo chmod 0644 /etc/group

Rationale

The /etc/group file contains information regarding groups that are configured on the system. Protection of this file is important for system security.

Verify Permissions on gshadow File

file_permissions_etc_gshadow

Description

To properly set the permissions of /etc/gshadow, run the command: 

$ sudo chmod 0640 /etc/gshadow

Rationale

The /etc/gshadow file contains group password hashes. Protection of this file is critical for system security.

Verify permissions on Message of the Day Banner

file_permissions_etc_motd

Description

To properly set the permissions of /etc/motd, run the command: 

$ sudo chmod 0644 /etc/motd

Rationale

Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
Proper permissions will ensure that only root user can modify the banner.

Verify Permissions on passwd File

file_permissions_etc_passwd

Description

To properly set the permissions of /etc/passwd, run the command: 

$ sudo chmod 0644 /etc/passwd

Rationale

If the /etc/passwd file is writable by a group-owner or the world the risk of its compromise is increased. The file contains the list of accounts on the system and associated information, and protection of this file is critical for system security.

Verify Permissions on shadow File

file_permissions_etc_shadow

Description

To properly set the permissions of /etc/shadow, run the command: 

$ sudo chmod 0640 /etc/shadow

Rationale

The /etc/shadow file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security. Failure to give ownership of this file to root provides the designated owner with access to sensitive information which could weaken the system security posture.