Rule Check: File Group Ownership

The name of the file to look for. If the file is not present, the test will either Fail or be Indeterminate, depending on the state of the Mark finding as Failed if the check was indeterminate checkbox, accessible at Settings > Configuration Scanner.

Any valid, full path to a single file, a comma-delimited list of paths to individual files, a single wildcard file path, or a comma-delimited list of wildcard file paths is acceptable.

Note: The asterisk (*) is the only acceptable wildcard character. You cannot use a question mark.

Some valid examples:

• /etc/init.d/httpd
• /etc/init.d/httpd, /etc/init.d/mysqld
• /etc/init.d/*
• /etc/rc.d/rc0.d/*, /etc/rc.d/rc1.d/*

Some examples that will not work:

• init.d/httpd
• /etc/rc.d/rc?.d

The group names (not group GIDs) of the group(s)that should include the group owner of this file. Any single name or comma separated list of names is acceptable. Use the NOT: operator to exclude a set of group names. Spaces are ignored.

Some valid examples are:

• root
• root, admin
• root, admin, jsmith
• NOT: nobody, ftp, system

Some examples that will not work:

• root, 0
• 0, 101, 201

Optional suggestion.