UCF STIG Viewer Logo

The /etc/passwd file must have mode 0644 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-798 GEN001380 SV-64557r1_rule Medium
Description
If the passwd file is writable by a group-owner or the world, the risk of passwd file compromise is increased. The passwd file contains the list of accounts on the system and associated information.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2020-02-25

Details

Check Text ( C-52971r1_chk )
Check the mode of the /etc/passwd file.

Procedure:
# ls -lL /etc/passwd

If /etc/passwd has a mode more permissive than 0644, this is a finding.
Fix Text (F-55153r1_fix)
Change the mode of the passwd file to 0644.

Procedure:
# chmod 0644 /etc/passwd