STIGQter: STIG Summary: VMware vRealize Automation 7.x SLES Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

The system boot loader configuration file(s) must be group-owned by root, bin, sys, or system.

DISA Rule

SV-100249r1_rule

Vulnerability Number

V-89599

Group Title

SRG-OS-000080-GPOS-00048

Rule Version

VRAU-SL-000440

Severity

CAT II

CCI(s)

• CCI-000213 - The information system enforces approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

10

Fix Recommendation

Change the group-ownership of the file:

# chgrp root /boot/grub/menu.lst

Check Contents

Check /boot/grub/menu.lst ownership:

# stat /boot/grub/menu.lst

If the group-owner of the file is not "root", "bin", "sys", or "system", this is a finding.

Vulnerability Number

V-89599

Documentable

False

Rule Version

VRAU-SL-000440

Severity Override Guidance

Check /boot/grub/menu.lst ownership:

# stat /boot/grub/menu.lst

If the group-owner of the file is not "root", "bin", "sys", or "system", this is a finding.

Check Content Reference

M

Target Key

3459

Comments