UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The /etc/gshadow file must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22341 GEN000000-LNX001431 SV-62667r1_rule ECLP-1 Medium
Description
The /etc/gshadow file is critical to system security and must be owned by a privileged user. The /etc/gshadow file contains a list of system groups and hashes for group passwords.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2015-03-26

Details

Check Text ( C-51589r1_chk )
Check the /etc/gshadow file is owned by root.
# ls -l /etc/gshadow
If the file is not owned by root, this is a finding.
Fix Text (F-53273r1_fix)
Change the owner of the /etc/gshadow file to root.
# chown root /etc/gshadow