Detections
Analytics

GEN001373 - The /etc/nsswitch.conf file must have mode 0644 or less permissive.

Information

The nsswitch.conf file (or equivalent) configures the source of a variety of system security information including account, group, and host lookups. Malicious changes could prevent the system from functioning or compromise system security.

Solution

Change the mode of the /etc/nsswitch.conf file to 0644 or less permissive.
# chmod 0644 /etc/nsswitch.conf

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22329, Rule-ID|SV-37332r1_rule, STIG-ID|GEN001373, Vuln-ID|V-22329

Plugin: Unix

Control ID: 93e11c246fbd0defa8fe03c60c7699d299e907bc4188c02542e6b20e639e1184