Unable to change permissions for files under /sys/fs to 600 instead of 666 (CIS compliance)

Solution Verified - Updated -

Issue

  • CIS compliance scanning reports file permission violations under /sys/fs (permissions 666 instead of 600).
  • The administrator wants to modify file permissions under /sys/fs and its subdirectories to 600 for compliance.
  • Attempts to manually apply chmod changes do not persist after reboot.

Environment

  • Red Hat Enterprise Linux 8, 9, 10
  • CIS compliance scanning enabled
  • Filesystem: /sys (sysfs virtual filesystem)
  • Kernel-managed interfaces under /sys/fs

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content