documentation_complete: true

title: 'Verify Group Who Owns /etc/sysconfig/sshd File'

description: '{{{ describe_file_group_owner(file="/etc/sysconfig/sshd", group="root") }}}'

rationale: |-
    The <tt>/etc/sysconfig/sshd</tt> file contains configuration options for the SSH daemon.
    Protection of this file is important for system security. The file should be owned by the root
    group to prevent unauthorized changes.

severity: medium

identifiers:
    cce@rhel8: CCE-89268-7

ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/sysconfig/sshd", group="root") }}}'

ocil: |-
    {{{ ocil_file_group_owner(file="/etc/sysconfig/sshd", group="root") }}}

fixtext: '{{{ fixtext_file_group_owner(file="/etc/sysconfig/sshd", group="root") }}}'

srg_requirement: '{{{ srg_requirement_file_group_owner(file="/etc/sysconfig/sshd", group="root") }}}'

template:
    name: file_groupowner
    vars:
        filepath: /etc/sysconfig/sshd
        gid_or_name: '0'

platform: system_with_kernel
