Detections
Analytics
GEN001380 - The /etc/passwd file must have mode 0644 or less permissive.
Information
If the password file is writable by a group owner or the world, the risk of password file compromise is increased. The password file contains the list of accounts on the system and associated information.Solution
Change the mode of the passwd file to 0644.Procedure:
# chmod 0644 /etc/passwd
Document all changes.
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-5(6), CAT|II, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-798r2_rule, STIG-ID|GEN001380, Vuln-ID|V-798
Plugin: Unix
Control ID: 390a9a3e4e9af9141f3132efc4dbc001fbdb7e105da69abab95dd4b23e736f7f