UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The root account must be the only account with GID of 0.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227548 GEN000000-SOL00440 SV-227548r603266_rule High
Description
Accounts with a GID of 0 have root group privileges.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-29710r488177_chk )
Check passwd and group files for non-root user ids and group ids with a GID of 0.

# more /etc/passwd
# more /etc/group

OR

# awk -F: '$4 == 0' /etc/passwd
# awk -F: '$3 == 0' /etc/group

Confirm the only account with a group id of 0 is root.

If the root account is not the only account with GID of 0, this is a finding.
Fix Text (F-29698r488178_fix)
Change the default GID of non-root accounts to a valid GID other than 0.