Detections
Analytics

GEN001394 - The /etc/group file must not have an extended ACL.

Information

The /etc/group file is critical to system security and must be protected from unauthorized modification. The group file contains a list of system groups and associated information.

Solution

Remove the extended ACL from the file.
# chmod A- /etc/group

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-226521r603265_rule, STIG-ID|GEN001394, STIG-Legacy|SV-26436, STIG-Legacy|V-22338, Vuln-ID|V-226521

Plugin: Unix

Control ID: 11af13e8a011f45996cd9a9a4d1e9eca90605cc99733e971ec0c8ee3afec1a74