AIX7-00-001035 - The Group Identifiers (GIDs) reserved for AIX system accounts must not be assigned to non-system accounts as their primary group GID.

Information

Reserved GIDs are typically used by system software packages. If non-system groups have GIDs in this range, they may conflict with system software, possibly leading to the group having permissions to modify system files.

Solution

Change the primary GID for non-system accounts that have reserved GIDs as their primary GIDs using the following command:
# chuser pgrp=<non_reserved_group_name> <non_system_user_name>

Item Details

Audit Name: DISA IBM AIX 7.x STIG v3r2

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: c7fda5f08afa6822ee617cb3f45baa287d96aa9d8bbf3c8957aaf0e84ba852fe

Detections

Analytics

AIX7-00-001035 - The Group Identifiers (GIDs) reserved for AIX system accounts must not be assigned to non-system accounts as their primary group GID.

Information

Solution

See Also

Item Details