| name | cis-ubuntu1204-v110-12-6 |
| description | Verify User/Group Ownership on /etc/group |
| category | cis-os-hardening |
| version | 1.1.0 |
| author | cyberstrike-official |
| tags | ["cis","ubuntu",12.04,"linux","file-ownership","group","access-control"] |
| cis_id | 12.6 |
| cis_benchmark | CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0 |
| tech_stack | ["ubuntu","linux"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
12.6 Verify User/Group Ownership on /etc/group (Scored)
Profile Applicability
Description
The /etc/group file contains a list of all the valid groups defined in the system. The command below allows read/write access for root and read access for everyone else.
Rationale
The /etc/group file needs to be protected from unauthorized changes by non-privileged users, but needs to be readable as this information is used with many non-privileged programs.
Audit Procedure
Using Command Line
Run the following command to determine the permissions on the /etc/group file:
/bin/ls -l /etc/group
Expected Result
-rw-r--r-- 1 root root <size> <date> /etc/group
Owner should be root and group should be root.
Remediation
Using Command Line
If the ownership of the /etc/group file are incorrect, run the following command to correct them:
/bin/chown root:root /etc/group
Default Value
root:root
References
- CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0
Profile
Level 1 - Scored