Verify Group Who Owns /etc/nftables Directory
An XCCDF Rule
Description
To properly set the group owner of /etc/nftables, run the command:
$ sudo chgrp root /etc/nftables
Rationale
The ownership of the /etc/nftables directory by the root group is important because this directory hosts nftables configuration. Protection of this directory is critical for system security. Assigning the ownership to root ensures exclusive control of the nftables configuration.
- ID
- xccdf_org.ssgproject.content_rule_directory_groupowner_etc_nftables
- Severity
- Medium
- References
- Updated
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- configure_strategy
- directory_groupowner_etc_nftables
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if rpm --quiet -q nftables; then
find -H /etc/nftables/ -maxdepth 1 -L -type d -exec chgrp -L root {} \;
else