Rule ID
SV-239508r661975_rule
Version
V2R2
CCIs
CCI-000213
The SLES for vRealize’s boot loader configuration files are critical to the integrity of the system and must be protected. Unauthorized modifications resulting from improper group ownership may compromise the boot loader configuration.
Check "/boot/grub/menu.lst" file ownership: # stat /boot/grub/menu.lst If the group-owner of the file is not "root", "bin", "sys", or "system", this is a finding.
Change the group-ownership of the "/boot/grub/menu.lst" file: # chgrp root /boot/grub/menu.lst