---
id: RHEL-07-010010
status: implemented - red hat
tag: file_perms
---

.. note::

    Ubuntu's ``debsums`` command does not support verification of permissions
    and ownership for files that were installed by packages. This STIG
    requirement will be skipped on Ubuntu.

The STIG requires that all files owned by an installed package must have their
permissions, user ownership, and group ownership set back to the vendor
defaults.

Deployers may opt-out of the change by setting the following Ansible variable:

.. code-block:: yaml

   security_reset_perm_ownership: no

---
id: RHEL-07-010010
status: implemented - red hat only
tag: file_perms
---

.. note::

    Ubuntu's ``debsums`` command does not support verification of permissions
    and ownership for files that were installed by packages. This STIG
    requirement will be skipped on Ubuntu.

The STIG requires that all files owned by an installed package must have their
permissions, user ownership, and group ownership set back to the vendor
defaults.

Deployers may opt-out of the change by setting the following Ansible variable:

.. code-block:: yaml

   security_reset_perm_ownership: no

Add 'only' to clarify status
[Docs] Add 'only' to clarify status

This patch adds 'only' to the implementation status
for RHEL-07-010010 to make it more clear that the tasks will take
action on CentOS/RHEL only.

Change-Id: I15b53a62817f20a09e684bdde2aaacfa02e63c17
