Rule Check: File Group Ownership

The File Group Ownership check determines whether one or more files are owned by a specific user group or by one of a list of user groups.

Parameters Description

File(s)

The name of the file to look for. If the file is not present, the test will either Fail or be Indeterminate, depending on the state of the Mark finding as Failed if the check was indeterminate checkbox, accessible at Settings > Configuration Scanner.

Any valid, full path to a single file, a comma-delimited list of paths to individual files, a single wildcard file path, or a comma-delimited list of wildcard file paths is acceptable.

Note: The asterisk (*) is the only acceptable wildcard character. You cannot use a question mark.

Some valid examples:

/etc/init.d/httpd
/etc/init.d/httpd, /etc/init.d/mysqld
/etc/init.d/*
/etc/rc.d/rc0.d/*, /etc/rc.d/rc1.d/*

Some examples that will not work:

init.d/httpd
/etc/rc.d/rc?.d

should be owned by group(s)

The group names (not group GIDs) of the group(s)that should include the group owner of this file. Any single name or comma separated list of names is acceptable. Use the NOT: operator to exclude a set of group names. Spaces are ignored.

Some valid examples are:

root
root, admin
root, admin, jsmith
NOT: nobody, ftp, system

Some examples that will not work:

root, 0
0, 101, 201

Remedial Suggestion (optional)

Optional suggestion.

Articles in this section

Rule Check: File Group Ownership