The root shell must be located in the / file system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1062	GEN001080	SV-27157r1_rule	ECSC-1	Low

Description
To ensure the root shell is available in repair and administrative modes, the root shell must be located in the / file system.

STIG	Date
Solaris 10 X86 Security Technical Implementation Guide	2013-04-09

Details

Check Text ( C-28087r1_chk )
Perform the following to determine if /usr is partitioned. # grep /usr /etc/vfstab If /usr is partitioned, check the location of root's default shell. # awk -F: '$1 == "root" {print $7}' /etc/passwd If the root shell is found to be on a partitioned /usr filesystem or is in a directory symlinked to a partitioned /usr filesystem, even if the actual root shell is a symlink back to the root filesystem, this is a finding.

Check Text ( C-28087r1_chk )

Perform the following to determine if /usr is partitioned.
# grep /usr /etc/vfstab

If /usr is partitioned, check the location of root's default shell.
# awk -F: '$1 == "root" {print $7}' /etc/passwd
If the root shell is found to be on a partitioned /usr filesystem or is in a directory symlinked to a partitioned /usr filesystem, even if the actual root shell is a symlink back to the root filesystem, this is a finding.

Fix Text (F-26000r1_fix)
Change the root account's shell to one present on the / filesystem. Example: # usermod -s /sbin/sh root