UCF STIG Viewer Logo

The root shell must be located in the / file system.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227607 GEN001080 SV-227607r603266_rule Low
Description
To ensure the root shell is available in repair and administrative modes, the root shell must be located in the / file system.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-29769r488378_chk )
Perform the following to determine if /usr is partitioned.
# grep /usr /etc/vfstab

If /usr is partitioned, check the location of root's default shell.
# awk -F: '$1 == "root" {print $7}' /etc/passwd
If the root shell is found to be on a partitioned /usr filesystem or is in a directory symlinked to a partitioned /usr filesystem, even if the actual root shell is a symlink back to the root filesystem, this is a finding.
Fix Text (F-29757r488379_fix)
Change the root account's shell to one present on the / filesystem. Example:

# usermod -s /sbin/sh root