cis-ubuntu1204-v110-12-6

name	cis-ubuntu1204-v110-12-6
description	Verify User/Group Ownership on /etc/group
category	cis-os-hardening
version	1.1.0
author	cyberstrike-official
tags	["cis","ubuntu",12.04,"linux","file-ownership","group","access-control"]
cis_id	12.6
cis_benchmark	CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0
tech_stack	["ubuntu","linux"]
cwe_ids	[]
chains_with	[]
prerequisites	[]
severity_boost	{}

12.6 Verify User/Group Ownership on /etc/group (Scored)

Profile Applicability

• Level 1

Description

The /etc/group file contains a list of all the valid groups defined in the system. The command below allows read/write access for root and read access for everyone else.

Rationale

The /etc/group file needs to be protected from unauthorized changes by non-privileged users, but needs to be readable as this information is used with many non-privileged programs.

Audit Procedure

Using Command Line

Run the following command to determine the permissions on the /etc/group file:

/bin/ls -l /etc/group

Expected Result

-rw-r--r-- 1 root root <size> <date> /etc/group

Owner should be root and group should be root.

Remediation

Using Command Line

If the ownership of the /etc/group file are incorrect, run the following command to correct them:

/bin/chown root:root /etc/group

Default Value

root:root

References

• CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0

Profile

Level 1 - Scored