Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-11987 | GEN001980 | SV-45164r1_rule | Medium |
Description |
---|
A plus (+) in system accounts files causes the system to lookup the specified entry using NIS. If the system is not using NIS, no such entries should exist. |
STIG | Date |
---|---|
SUSE Linux Enterprise Server v11 for System z | 2016-12-20 |
Check Text ( C-42508r1_chk ) |
---|
Check system configuration files for plus (+) entries. Procedure: # find / -name .rhosts # grep + / # find / -name .shosts # grep + / # find / -name hosts.equiv # grep + / # find / -name shosts.equiv # grep + / # grep + /etc/passwd # grep + /etc/shadow # grep + /etc/group If the .rhosts, .shosts, hosts.equiv, shosts.equiv, /etc/passwd, /etc/shadow, and/or /etc/group files contain a plus (+) and do not define entries for NIS+ netgroups, this is a finding. |
Fix Text (F-38561r1_fix) |
---|
Edit the .rhosts, .shosts, hosts.equiv, shosts.equiv, /etc/passwd, /etc/shadow, and/or /etc/group files and remove entries containing a plus (+). |