Detections
Analytics

GEN001980 - /etc/security/passwd file must not contain a plus (+) without defining entries for NIS+ netgroups - '/etc/security/passwd'

Information

A plus (+) in system accounts files causes the system to lookup the specified entry using NIS. If the system is not using NIS, no such entries should exist.

Solution

Edit the .rhosts, .shosts, hosts.equiv, shosts.equiv, /etc/passwd, /etc/security/passwd, and/or /etc/group files and remove entries containing a plus (+).

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2, CAT|II, CCI|CCI-000366, Rule-ID|SV-38740r1_rule, STIG-ID|GEN001980, Vuln-ID|V-11987

Plugin: Unix

Control ID: a6f839f86a4f6cedb2d9cd7e92d306acaa8a649f985b2a84edf736f79a320390