UCF STIG Viewer Logo

The root shell must be located in the / file system.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1062 GEN001080 SV-27157r1_rule ECSC-1 Low
Description
To ensure the root shell is available in repair and administrative modes, the root shell must be located in the / file system.
STIG Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-28087r1_chk )
Perform the following to determine if /usr is partitioned.
# grep /usr /etc/vfstab

If /usr is partitioned, check the location of root's default shell.
# awk -F: '$1 == "root" {print $7}' /etc/passwd
If the root shell is found to be on a partitioned /usr filesystem or is in a directory symlinked to a partitioned /usr filesystem, even if the actual root shell is a symlink back to the root filesystem, this is a finding.
Fix Text (F-26000r1_fix)
Change the root account's shell to one present on the / filesystem. Example:

# usermod -s /sbin/sh root