Skip to content

Commit

Permalink
Update rule description
Browse files Browse the repository at this point in the history
Reflects the recent change that the check now considers /usr/lib/group
in addition.
  • Loading branch information
jan-cerny committed Nov 7, 2024
1 parent fb9b869 commit 6a30452
Showing 1 changed file with 5 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,11 @@ documentation_complete: true
title: 'Ensure All Files Are Owned by a Group'

description: |-
If any file is not group-owned by a group present in /etc/group, the cause of the lack of
If any file is not group-owned by a valid defined group, the cause of the lack of
group-ownership must be investigated. Following this, those files should be deleted or
assigned to an appropriate group.
assigned to an appropriate group. The groups need to be defined in <tt>/etc/group</tt>
or in <tt>/usr/lib/group</tt> if <tt>nss-altfiles</tt> are configured to be used
in <tt>/etc/nsswitch.conf</tt>.
Locate the mount points related to local devices by the following command:
<pre>$ findmnt -n -l -k -it $(awk '/nodev/ { print $2 }' /proc/filesystems | paste -sd,)</pre>
Expand Down Expand Up @@ -75,7 +77,7 @@ srg_requirement: 'All {{{ full_name }}} local files and directories must have a
warnings:
- general: |-
This rule only considers local groups as valid groups.
If you have your groups defined outside <code>/etc/group</code>, the rule won't consider those.
If you have your groups defined outside <code>/etc/group</code> or <code>/usr/lib/group</code>, the rule won't consider those.
- general: |-
This rule can take a long time to perform the check and might consume a considerable
amount of resources depending on the number of files present on the system. It is not a
Expand Down

0 comments on commit 6a30452

Please sign in to comment.