The /etc/access.conf file must have a privileged group owner.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1054	GEN000000-LNX00420	SV-37227r1_rule	ECLP-1	Medium

Description
Depending on the access restrictions of the /etc/access.conf file, if the group owner were not a privileged group, it could endanger system security.

STIG	Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide	2017-03-01

Details

Check Text ( C-35917r1_chk )
Check access configuration group ownership: # ls -lL /etc/security/access.conf If this file exists and has a group-owner that is not a privileged user, this is a finding.

Fix Text (F-31174r1_fix)
Use the chgrp command to ensure the group owner is root, sys, or bin. (for example: # chgrp root /etc/security/access.conf ).