GEN000000-SOL00560 - The /etc/zones directory, and its contents, must be group-owned by root, sys, or bin - /etc/zones

Information

Solaris zones configuration files must be protected against illicit creation, modification, and deletion.

Solution

Change the group ownership of the files and directories.
# chgrp -R sys /etc/zones
# chgrp root /etc/zones/*.xml
# chgrp bin /etc/zones/SUN*.xml

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227550r603266_rule, STIG-ID|GEN000000-SOL00560, STIG-Legacy|SV-27018, STIG-Legacy|V-22604, Vuln-ID|V-227550

Plugin: Unix

Control ID: c13093fc2dd95ddce4526cd9bb3d9c6be05897f8850fbabdad060aee33ae1e16