UCF STIG Viewer Logo

The /etc/passwd file must not contain password hashes.


Overview

Finding ID Version Rule ID IA Controls Severity
V-226528 GEN001470 SV-226528r603265_rule Medium
Description
If password hashes are readable by non-administrators, the passwords are subject to attack through lookup tables or cryptographic weaknesses in the hashes.
STIG Date
Solaris 10 SPARC Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-28689r482972_chk )
Verify no password hashes are present in /etc/passwd.
# cut -d : -f 2 /etc/passwd | grep -v '^x$'
If any password hashes are returned, this is a finding.
Fix Text (F-28677r482973_fix)
Migrate /etc/passwd password hashes to /etc/shadow.
# pwconv