GEN001379 - The /etc/passwd file must be group-owned by bin, security, sys, or system.

Information

The /etc/passwd file contains the list of local system accounts. It is vital to system security and must be protected from unauthorized modification.

Solution

Change the group owner of the /etc/passwd file to security, bin, sys, or system.
Procedure:
# chgrp security /etc/passwd

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Audit Name: DISA AIX 5.3 STIG v1r2

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(6), CAT|II, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-38723r1_rule, STIG-ID|GEN001379, Vuln-ID|V-22333

Plugin: Unix

Control ID: baee501414efc60b8ddccacdd798badb32e92dacbecf9a3645a312e9d984d4ae