Detections
Analytics

GEN002140 - All shells referenced in /etc/passwd must be listed in the /etc/shells file, except any specified for preventing logins.

Information

The shells file lists approved default shells. It helps provide layered defense to the security approach by ensuring users cannot change

Solution

Use the 'chsh' utility or edit the /etc/passwd file and correct the error by changing the default shell of the account in error to an acceptable shell name contained in the /etc/shells file.

Example:
# chsh -s /bin/bash testuser

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Group-ID|V-917, Rule-ID|SV-37393r2_rule, STIG-ID|GEN002140, Vuln-ID|V-917

Plugin: Unix

Control ID: 5863f6f05cd1a0448802ad17f33d9b8559800b1f0ccfb1723de05a721cab1445