Detections
Analytics

GEN001475 - The /etc/group file must not contain any group password hashes.

Information

Group passwords are typically shared and should not be used. Additionally, if password hashes are readable by non-administrators, the passwords are subject to attack through lookup tables or cryptographic weaknesses in the hashes.

Solution

Edit /etc/group and change the password field to an exclamation point (!) to lock the group password.

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22348, Rule-ID|SV-37383r1_rule, STIG-ID|GEN001475, Vuln-ID|V-22348

Plugin: Unix

Control ID: a7af5ecd7f1226bd3a990fb6f838f8974827036a6faecabaf1d2762a8ff8d911