Detections
Analytics

GEN001394 - The /etc/group file must not have an extended ACL.

Information

The /etc/group file is critical to system security and must be protected from unauthorized modification. The group file contains a list of system groups and associated information.

Solution

Remove the extended ACL from the file.
# chmod A- /etc/group

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227647r603266_rule, STIG-ID|GEN001394, STIG-Legacy|SV-26436, STIG-Legacy|V-22338, Vuln-ID|V-227647

Plugin: Unix

Control ID: 5ad060727aec1bb7b7410335424031321ee954ea84d13497a4df66f8bc00c64a