Verify the UEFI Boot Loader grub.cfg User Ownership
An XCCDF Rule
Description
The file /boot/grub2/grub.cfg should
be owned by the root user to prevent destruction
or modification of the file.
To properly set the owner of /boot/grub2/grub.cfg, run the command:
$ sudo chown root /boot/grub2/grub.cfg
Rationale
Only root should be able to modify important boot parameters.
- ID
- xccdf_org.ssgproject.content_rule_file_owner_efi_grub2_cfg
- Severity
- Medium
- References
- Updated