Detections
Analytics

1.127 ALMA-09-017070

Information

AlmaLinux OS 9 /etc/shadow file must be owned by root.

GROUP ID: V-269230
RULE ID: SV-269230r1050112

The "/etc/shadow" file contains the list of local system accounts and stores password hashes. Protection of this file is critical for system security.

Failure to give ownership of this file to root provides the designated owner with access to sensitive information, which could weaken the system security posture.

Solution

Change the owner of the file /etc/shadow to root by running the following command:

$ chown root /etc/shadow

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269230r1050112_rule, STIG-ID|ALMA-09-017070, Vuln-ID|V-269230

Plugin: Unix

Control ID: fa22a4abcff5068a87b5cb58cfbf479b0379bc3af63169b10891b9c527b073c0