The /etc/nsswitch.conf file must have mode 0644 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22329	GEN001373	SV-44987r1_rule		Medium

Description
The nsswitch.conf file (or equivalent) configures the source of a variety of system security information including account, group, and host lookups. Malicious changes could prevent the system from functioning or compromise system security.

STIG	Date
SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide	2018-09-19

Details

Check Text ( C-42394r1_chk )
Check the mode of the /etc/nsswitch.conf file. # ls -l /etc/nsswitch.conf If the file mode is not 0644, this is a finding.

Fix Text (F-38404r1_fix)
Change the mode of the /etc/nsswitch.conf file to 0644 or less permissive. # chmod 0644 /etc/nsswitch.conf