Skip to content

Verify that System Executable Have Root Ownership

An XCCDF Rule

Description

/bin
/sbin
/usr/bin
/usr/sbin
/usr/local/bin
/usr/local/sbin
All these directories should be owned by the root user. If any directory DIR in these directories is found to be owned by a user other than root, correct its ownership with the following command:
$ sudo chown root DIR

Rationale

System binaries are executed by privileged users as well as system services, and restrictive permissions are necessary to ensure that their execution of these programs cannot be co-opted.

ID
xccdf_org.ssgproject.content_rule_dir_ownership_binary_dirs
Severity
Medium
References
Updated