BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

RHEL-10-400285 RHEL 10 must be configured so that all local files and directories have a valid group owner.

DISA STIG library V1R3
All changes in this version
first version loaded CAT II

Maps to AC-3 via CCI-000213

Title

RHEL 10 must be configured so that all local files and directories have a valid group owner.

Control

Verify RHEL 10 is configured so that all local files and directories have a valid group with the following command: $ df --local -P | awk {'if (NR!=1) print $6'} | sudo xargs -I '{}' find '{}' -xdev -nogroup If any files on the system do not have an assigned group, this is a finding.

Discussion

Files without a valid group owner may be unintentionally inherited if a group is assigned the same group identifier (GID) as the GID of the files without a valid group owner.

Related controls

CCI-000213

Fix

Configure RHEL 10 so that all local files and directories have a valid group owner. Either remove all files and directories from RHEL 10 that do not have a valid group, or assign a valid group to all files and directories on the system with the "chgrp" command: $ sudo chgrp