UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The root account must be the only account with GID of 0.


Overview

Finding ID Version Rule ID IA Controls Severity
V-48035 SOL-11.1-070220 SV-60907r1_rule Medium
Description
All accounts with a GID of 0 have root group privileges and must be limited to the group account only.
STIG Date
Solaris 11 SPARC Security Technical Implementation Guide 2017-09-20

Details

Check Text ( C-50471r1_chk )
Identify any users with GID of 0.

# awk -F: '$4 == 0' /etc/passwd
# awk -F: '$3 == 0' /etc/group
Confirm the only account with a group id of 0 is root.

If the root account is not the only account with GID of 0, this is a finding.
Fix Text (F-51647r1_fix)
The root role is required.

Change the default GID of non-root accounts to a valid GID other than 0.