Detections
Analytics

7.2.3 Ensure all groups in /etc/passwd exist in /etc/group

Information

Over time, system administration errors and changes can lead to groups being defined in /etc/passwd but not in /etc/group.

Groups defined in the /etc/passwd file but not in the /etc/group file pose a threat to system security since group permissions are not properly managed.

Solution

Analyze the output of the Audit step above and perform the appropriate action to correct any discrepancies found.

See Also

https://workbench.cisecurity.org/benchmarks/26891

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION

References: 800-53|AC-2, 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|CM-1, 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|IA-5, 800-53|MP-2

Plugin: Unix

Control ID: 37d6fbe4407380e1b149db6c396bfb63fd83e120a0e484a83b9a2f75fffebd4b