UCF STIG Viewer Logo

All skeleton files (typically in /etc/skel) must be group-owned by root, bin, or sys.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227675 GEN001830 SV-227675r603266_rule Medium
Description
If the skeleton files are not protected, unauthorized personnel could change user startup parameters and possibly jeopardize user files.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-29837r488603_chk )
Verify the skeleton files are group-owned by root, bin, or sys.

Procedure:
# ls -alL /etc/skel

If a skeleton file is not group-owned by root, bin, or sys, this is a finding.
Fix Text (F-29825r488604_fix)
Change the group owner of the skeleton file to root.

Procedure:
# chgrp /etc/skel/[skeleton file]