Detections
Analytics
GEN002140 - All shells referenced in /etc/passwd must be listed in the /etc/shells file, except shells specified for preventing logins
Information
The shells file lists approved default shells. It helps provide layered defense to the security approach by ensuring users cannot change their default shell to an unauthorized shell that may not be secure.Solution
Use the chsh utility or edit the /etc/passwd file and correct the error by changing the default shell of the account in error to an acceptable shell name contained in the /etc/shells file.Alternatively, use the SMIT to change the /etc/passwd shell entry.
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT
References: 800-53|AC-6, 800-53|CM-7(5), CAT|II, CCI|CCI-000366, CSCv6|2.2, Rule-ID|SV-38742r1_rule, STIG-ID|GEN002140, Vuln-ID|V-917
Plugin: Unix
Control ID: d3c02ce1ace43ff9a36789d1bfb1e367891e6980ca889484c0d36e50267710c8