AIX7-00-002103 - All AIX shells referenced in passwd file must be listed in /etc/shells file, except any shells specified for the purpose of preventing logins.

Information

The /etc/shells file lists approved default shells. It helps provide layered defense to the security approach by ensuring users cannot change their default shell to an unauthorized unsecure shell.

Solution

Use the "chsh" utility or edit the "/etc/passwd" file and correct the error by changing the default shell of the account in error to an acceptable shell name contained in the "/etc/shells file".

Alternatively, use the SMIT to change the "/etc/passwd" shell entry.

Item Details

Audit Name: DISA IBM AIX 7.x STIG v3r3

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: 3524bed2a6423c64715fb0d13cc43c78a598c5cc719b9fafd385e387aa502cef

Detections

Analytics

AIX7-00-002103 - All AIX shells referenced in passwd file must be listed in /etc/shells file, except any shells specified for the purpose of preventing logins.

Information

Solution

See Also

Item Details