Detections
Analytics

GEN000000-HPUX0200 - userdb database must not be used to override the system-wide variables in the security file, unless required

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

System is running in Trusted Mode.

Solution

If the system is operating in Trusted Mode, no fix is required.

For SMSE:
Note: There may be additional package/bundle updates that must be installed to support attributes in the /etc/default/security file.

Delete any configured users from the /var/adm/userdb database:
# /usr/sbin/userdbset -d -u <user>

Restart auditing:
# /sbin/init.d/auditing stop
# /sbin/init.d/auditing start

See Also

https://iasecontent.disa.mil/stigs/zip/U_HPUX_11-31_V1R19_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000366, Rule-ID|SV-52330r1_rule, STIG-ID|GEN000000-HPUX0200, Vuln-ID|V-40350

Plugin: Unix

Control ID: 065e5ad544b2a9f8d233c69edf6f8f895a03c36626ac85993ee5e871bb143884