The /etc/passwd file must have mode 0644 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-798	GEN001380	SV-798r2_rule	ECLP-1	Medium

Description
If the password file is writable by a group owner or the world, the risk of password file compromise is increased. The password file contains the list of accounts on the system and associated information.

STIG	Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE	2015-10-01

Details

Check Text ( C-8016r2_chk )
Check the mode of the /etc/passwd file. Procedure: # ls -lL /etc/passwd If /etc/passwd has a mode more permissive than 0644, this is a finding.

Fix Text (F-952r2_fix)
Change the mode of the passwd file to 0644. Procedure: # chmod 0644 /etc/passwd Document all changes.