Details

Set the owner and group of /etc/grub.conf to the root user.

Rationale:

Setting the owner and group to root prevents non-root users from changing the file.

Solution

Run the following command to assign owner and group of /etc/grub.conf to root:

# chown root:root /etc/grub.conf

Default Value:

OS Default: No

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3096

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-3
• CSCv6|3.1
• CSCv7|14.6

Source

• Tenable.com/audits