The Photon operating system must be configured so the "/root" path is protected from unauthorized access.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-256560	PHTN-30-000091	SV-256560r887354_rule		Medium

Description
If the "/root" path is accessible to users other than root, unauthorized users could change the root partitions files.

STIG	Date
VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide	2023-12-01

Details

Check Text ( C-60235r887352_chk )
At the command line, run the following command: # stat -c "%n permissions are %a and owned by %U:%G" /root Expected result: /root permissions are 700 and owned by root:root If the output does not match the expected result, this is a finding.

Fix Text (F-60178r887353_fix)
At the command line, run the following commands: # chmod 700 /root # chown root:root /root