Ensure system library directories are group-owned by root or a system account

# Check group ownership of standard library directories
# Group must be root (GID 0) or a system account (GID < 1000)
fail=0
for libdir in /lib /lib64 /usr/lib /usr/lib64 /usr/local/lib /usr/local/lib64; do
  if [ -d "$libdir" ]; then
    gid=$(stat -c '%g' "$libdir" 2>/dev/null)
    if [ -n "$gid" ] && [ "$gid" -ge 1000 ] 2>/dev/null; then
      group=$(stat -c '%G' "$libdir" 2>/dev/null)
      echo "FAIL: $libdir is group-owned by $group (GID $gid, expected system group)"
      fail=1
    fi
  fi
done
if [ "$fail" -eq 0 ]; then
  echo "OK: All library directories are group-owned by root or a system group"
  exit 0
fi
exit 1

expected_exit:

0

find_paths:

/lib, /lib64, /usr/lib, /usr/lib64, /usr/local/lib, /usr/local/lib64

find_type:

d

group:

root