Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The /etc/shells (or equivalent) file must exist.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-916 | GEN002120 | SV-38741r1_rule | ECSC-1 | Medium |
| Description |
|---|
| The shells file (or equivalent) lists approved default shells. It helps provide layered defense to the security approach by ensuring users cannot change their default shell to an unauthorized shell that may not be secure. |
| STIG | Date |
|---|---|
| AIX 5.3 Security Technical Implementation Guide | 2012-05-25 |
Details
| Check Text ( C-37242r1_chk ) |
|---|
| Check /etc/security/login.cfg for a shells stanza. Procedure: # grep -p usw: /etc/security/login.cfg | grep "shells =" If no such stanza exists, this is a finding. Check the /etc/shells file. Procedure: # more /etc/shells If the /etc/shells file does not exist, this is a finding. |
| Fix Text (F-32456r1_fix) |
|---|
| Edit the /etc/security/login.cfg file and add a shells stanza containing a list of valid shells. #chsec -f /etc/security/login.cfg -s usw -a shells= Create the /etc/shells file. #vi /etc/shells |