UCF STIG Viewer Logo

The /etc/nsswitch.conf file must not have an extended ACL.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22330 GEN001374 SV-25977r1_rule ECLP-1 Medium
Description
The nsswitch.conf file (or equivalent) configures the source of a variety of system security information including account, group, and host lookups. Malicious changes could prevent the system from functioning or compromise system security.
STIG Date
UNIX SRG 2013-03-26

Details

Check Text ( C-27499r1_chk )
Verify /etc/nsswitch.conf has no extended ACL.

Procedure:
# ls -l /etc/nsswitch.conf
If the permissions include a "+", the file has an extended ACL and this is a finding.
Fix Text (F-26120r1_fix)
Remove the extended ACL from the /etc/nsswitch.conf file.