UCF STIG Viewer Logo

The /etc/gshadow file must be group-owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22342 GEN000000-LNX001432 SV-62681r1_rule Medium
Description
The /etc/gshadow file is critical to system security and must be protected from unauthorized modification. The /etc/gshadow file contains a list of system groups and hashes for group passwords.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2020-02-25

Details

Check Text ( C-51603r1_chk )
Check the /etc/gshadow file is group-owned by root.
# ls -l /etc/gshadow
If the file is not group-owned by root, this is a finding.
Fix Text (F-53287r1_fix)
Change the group-owner of the /etc/gshadow file to root.
# chgrp root /etc/gshadow