Rule ID
SV-44656r1_rule
Version
V1R12
CCIs
The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the system's security.
Check /etc/sysctl.conf group ownership: # ls -lL /etc/sysctl.conf If /etc/sysctl.conf is not group-owned by root, this is a finding.
Use the chgrp command to change the group owner of /etc/sysctl.conf to root: # chgrp root /etc/sysctl.conf