Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-4268 | GEN000000-LNX00320 | SV-44654r1_rule | IAAC-1 | High |
Description |
---|
If special privilege accounts are compromised, the accounts could provide privileges to execute malicious commands on a system. |
STIG | Date |
---|---|
SUSE Linux Enterprise Server v11 for System z | 2012-12-13 |
Check Text ( C-42158r1_chk ) |
---|
Perform the following to check for unnecessary privileged accounts: # grep "^shutdown" /etc/passwd # grep "^halt" /etc/passwd # grep "^reboot" /etc/passwd If any unnecessary privileged accounts exist this is a finding. |
Fix Text (F-38109r1_fix) |
---|
Remove any special privilege accounts, such as shutdown and halt, from the /etc/passwd and /etc/shadow files using the "userdel" or "system-config-users" commands. |