The AIX /etc/group file must be owned by root.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-91611	AIX7-00-002083	SV-101709r1_rule		Medium

Description
The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.

STIG	Date
IBM AIX 7.x Security Technical Implementation Guide	2020-02-24

Details

Check Text ( C-90765r1_chk )
Verify the "/etc/group" file is owned by "root" using command: # ls -l /etc/group The above command should yield the following output: -rw-r--r-- 1 root security 387 Sep 06 11:40 /etc/group If the file is not owned by "root", this is a finding.

Fix Text (F-97809r1_fix)
Change the owner of the "/etc/group" file to "root": # chown root /etc/group