RHEL 10 must enforce "root" ownership of the "/boot/grub2/grub.cfg" file.

The " /boot/grub2/grub.cfg" file stores sensitive system configuration. Protection of this file is critical for system security.

Verify RHEL 10 enforces ownership of the "/boot/grub2/grub.cfg" file with the following command:

$ sudo stat -c "%U %n" /boot/grub2/grub.cfg root /boot/grub2/grub.cfg

If the "/boot/grub2/grub.cfg" file does not have an owner of "root", this is a finding.

Configure RHEL 10 to enforce ownership of the "/boot/grub2/grub.cfg" file.

Change the owner of the "/boot/grub2/grub.cfg" file to "root" by running the following command:

$ sudo chown root /boot/grub2/grub.cfg