UCF STIG Viewer Logo

The /etc/pam.conf file must be group-owned by sys.


Overview

Finding ID Version Rule ID IA Controls Severity
V-40476 GEN000000-HPUX0370 SV-52464r1_rule ECLP-1 Medium
Description
The /etc/pam.conf file is the system configuration file for the Pluggable Authentication Module (PAM) architecture. It supports per user authentication, account, session, and password management. If the configuration is modified maliciously, users may gain unauthorized system access.
STIG Date
HP-UX 11.31 Security Technical Implementation Guide 2018-09-14

Details

Check Text ( C-47020r2_chk )
If the system is configured for Trusted Mode, this check is not applicable.

For SMSE:
Verify the file is group-owned by sys.
# ls -lL /etc/pam.conf

If the file is not group-owned by sys, this is a finding.
Fix Text (F-45426r1_fix)
If the system is operating in Trusted Mode, no fix is required.

For SMSE:
As root, change the file group ownership.
# chgrp sys /etc/pam.conf