The /etc/group file must have mode 0644 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22337	GEN001393	SV-44998r1_rule	ECLP-1	Medium

Description
The /etc/group file is critical to system security and must be protected from unauthorized modification. The group file contains a list of system groups and associated information.

STIG	Date
SUSE Linux Enterprise Server v11 for System z	2013-04-18

Details

Check Text ( C-42403r1_chk )
Check the mode of the /etc/group file. # ls -l /etc/group If the file mode is more permissive than 0644, this is a finding.

Fix Text (F-38413r1_fix)
Change the mode of the /etc/group file to 0644 or less permissive. # chmod 0644 /etc/group