Verify /boot/grub2/user.cfg User Ownership
An XCCDF Rule
Description
The file /boot/grub2/user.cfg should be owned by the root
user to prevent reading or modification of the file.
To properly set the owner of /boot/grub2/user.cfg, run the command:
$ sudo chown root /boot/grub2/user.cfg
Rationale
Only root should be able to modify important boot parameters. Also, non-root users who read the boot parameters may be able to identify weaknesses in security upon boot and be able to exploit them.
- ID
- xccdf_org.ssgproject.content_rule_file_owner_efi_user_cfg
- Severity
- Medium
- References
- Updated