UCF STIG Viewer Logo

The /etc/gshadow file must not contain any group password hashes.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22349 GEN000000-LNX001476 SV-37386r1_rule ECLP-1 Medium
Description
Group passwords are typically shared and should not be used.
STIG Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide 2017-03-01

Details

Check Text ( C-36073r1_chk )
Check the /etc/gshadow file for password hashes.
# cut -d : -f 2 /etc/gshadow | egrep -v '^(x|!!)$'
If any password hashes are returned, this is a finding.

Fix Text (F-31317r1_fix)
Edit /etc/gshadow and change the password field to an exclamation point (!) to lock the group password.