UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The /etc/passwd file must not contain password hashes.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22347 GEN001470 SV-45016r1_rule Medium
Description
If password hashes are readable by non-administrators, the passwords are subject to attack through lookup tables or cryptographic weaknesses in the hashes.
STIG Date
SUSE Linux Enterprise Server v11 for System z 2016-12-20

Details

Check Text ( C-42411r1_chk )
Verify no password hashes are present in /etc/passwd.
# cut -d : -f 2 /etc/passwd | egrep -v '^(x|\*)$'
If any password hashes are returned, this is a finding.
Fix Text (F-38432r1_fix)
Migrate /etc/passwd password hashes to /etc/shadow.
# pwconv