The root shell must be located in the / file system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-227607	GEN001080	SV-227607r603266_rule		Low

Description
To ensure the root shell is available in repair and administrative modes, the root shell must be located in the / file system.

STIG	Date
Solaris 10 X86 Security Technical Implementation Guide	2022-09-07

Details

Check Text ( C-29769r488378_chk )
Perform the following to determine if /usr is partitioned. # grep /usr /etc/vfstab If /usr is partitioned, check the location of root's default shell. # awk -F: '$1 == "root" {print $7}' /etc/passwd If the root shell is found to be on a partitioned /usr filesystem or is in a directory symlinked to a partitioned /usr filesystem, even if the actual root shell is a symlink back to the root filesystem, this is a finding.

Check Text ( C-29769r488378_chk )

Perform the following to determine if /usr is partitioned.
# grep /usr /etc/vfstab

If /usr is partitioned, check the location of root's default shell.
# awk -F: '$1 == "root" {print $7}' /etc/passwd
If the root shell is found to be on a partitioned /usr filesystem or is in a directory symlinked to a partitioned /usr filesystem, even if the actual root shell is a symlink back to the root filesystem, this is a finding.

Fix Text (F-29757r488379_fix)
Change the root account's shell to one present on the / filesystem. Example: # usermod -s /sbin/sh root