GEN001379 - The /etc/passwd file must be group-owned by root, bin, or sys.

Information

The /etc/passwd file contains the list of local system accounts. It is vital to system security and must be protected from unauthorized modification.

Solution

Change the group-owner of the /etc/passwd file to root, bin or sys.

Procedure:
# chgrp root /etc/passwd

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Audit Name: DISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22333, Rule-ID|SV-37337r1_rule, STIG-ID|GEN001379, Vuln-ID|V-22333

Plugin: Unix

Control ID: cab4e398604fa9065b07bc6e1d651089dd5b66fc3b09649d3b7b474c59bdf516