UCF STIG Viewer Logo

The /etc/group file must not have an extended ACL.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22338 GEN001394 SV-38726r1_rule ECLP-1 Medium
Description
The /etc/group file is critical to system security and must be protected from unauthorized modification. The group file contains a list of system groups and associated information.
STIG Date
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2018-09-18

Details

Check Text ( C-37015r1_chk )
Verify the /etc/group file has no extended ACL.

Procedure:

#aclget /etc/group
Check if extended permissions are disabled. If extended permissions are not disabled, this is a finding.
Fix Text (F-32283r1_fix)
Remove the extended ACL from the /etc/group file and disable extended permissions.

#acledit /etc/group