The AIX /etc/group file must be owned by root.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-215274	AIX7-00-002083	SV-215274r508663_rule		Medium

Description
The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is important for system security.

STIG	Date
IBM AIX 7.x Security Technical Implementation Guide	2022-06-06

Details

Check Text ( C-16472r294273_chk )
Verify the "/etc/group" file is owned by "root" using command: # ls -l /etc/group The above command should yield the following output: -rw-r--r-- 1 root security 387 Sep 06 11:40 /etc/group If the file is not owned by "root", this is a finding.

Fix Text (F-16470r294274_fix)
Change the owner of the "/etc/group" file to "root": # chown root /etc/group