Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The root shell must be located in the / file system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1062 | GEN001080 | SV-38773r1_rule | ECSC-1 | Low |
| Description |
|---|
| To ensure the root shell is available in repair and administrative modes, the root shell must be located in the / file system. |
| STIG | Date |
|---|---|
| Draft AIX Security Technical Implementation Guide | 2011-08-17 |
Details
| Check Text ( C-36934r1_chk ) |
|---|
| Determine if /usr has a dedicated file system. Procedure: # grep /usr: /etc/filesystems If /usr is on a dedicated file system, check the location of root's default shell. Find the location of the root users shell. # grep "^root" /etc/passwd|cut -d: -f7|cut -d/ -f2 If the root shell is found to be on a /usr dedicated file system, this is a finding. |
| Fix Text (F-33346r1_fix) |
|---|
| Change the root account's shell to one present on the / file system. Procedure: Edit /etc/passwd and change the shell for the root account to one present on the / file system (such as /bin/sh, assuming /bin is not on a separate file system). If the system does not store shell configuration in the /etc/passwd file, consult vendor documentation for the correct procedure for the system. |