id,summary,reporter,owner,description,type,status,component,version,resolution,keywords,cc,guest,host
15069,Minor issue with file permissions - fail SCAP security validation -> fixed in releases higher than 5.0.14,VirtualBarista,,"OpenSCAP (SCAP) security validation (CCE-26966-2, reference AC-6) requires that the following directories:

/lib
/lib64
/usr/lib
/usr/lib64

do not contain any group (or world) writable files.

unfortunately, when guest additions are installed in a CentOS 7 guest server, there are two files that fail this validation (they are group writable):

/lib/modules/*/misc/vboxguest.ko
/lib/modules/*/misc/vboxsf.ko

(also linked via /usr/lib)

While this is a minor issue (guest writable by root only), it does make the entire security validation fail.

Thank you!

",defect,closed,guest additions,VirtualBox 5.0.14,fixed,,,Linux,Linux