UCF STIG Viewer Logo

The root account must be the only account with GID of 0.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227548 GEN000000-SOL00440 SV-227548r603266_rule High
Description
Accounts with a GID of 0 have root group privileges.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2020-12-04

Details

Check Text ( C-29710r488177_chk )
Check passwd and group files for non-root user ids and group ids with a GID of 0.

# more /etc/passwd
# more /etc/group

OR

# awk -F: '$4 == 0' /etc/passwd
# awk -F: '$3 == 0' /etc/group

Confirm the only account with a group id of 0 is root.

If the root account is not the only account with GID of 0, this is a finding.
Fix Text (F-29698r488178_fix)
Change the default GID of non-root accounts to a valid GID other than 0.