Suggestion on the 'Ensure All Files Are Owned...' items

Andrew Gilmore agilmore2 at
Fri Jul 19 17:52:58 UTC 2013

I agree, I see false positives on my systems where the only output
from a manual 'sudo find / -type f -perm o+w' is errors on /proc


On Thu, Jul 18, 2013 at 11:11 AM, Robert Sanders <rsanders at> wrote:
> I was wondering why the tests for 'Ensure all Files Are Owned by a User' and
> 'Ensure all Files are Owned by a Group' kept on failing.  Drilling down it
> looks like the underlying find command being used is along the lines of :
> find PARTITION -xdev -nouser -print
> When I run this command manually I've had complaints that find can't read
> files in /proc.  Looking at the man page suggests this can be avoided by
> adding the '-ignore_readdir_race' option before the -xdev option.
> This change may need to be added for both SSG items 2.2.3.e and 2.2.3.f
> -Rob
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at

More information about the scap-security-guide mailing list