UCF STIG Viewer Logo

The /etc/nsswitch.conf file must not have an extended ACL.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22330 GEN001374 SV-64545r1_rule Medium
Description
The nsswitch.conf file (or equivalent) configures the source of a variety of system security information including account, group, and host lookups. Malicious changes could prevent the system from functioning or compromise system security.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2020-02-25

Details

Check Text ( C-52959r1_chk )
Verify /etc/nsswitch.conf has no extended ACL.

# ls -l /etc/nsswitch.conf

If the permissions include a '+', the file has an extended ACL. If the file has an extended ACL and it has not been documented with the IAO, this is a finding.
Fix Text (F-55141r1_fix)
Remove the extended ACL from the file.

# setfacl --remove-all /etc/nsswitch.conf