Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-4268 | GEN000000-LNX00320 | SV-4268r2_rule | IAAC-1 | High |
Description |
---|
If special privilege accounts are compromised, the accounts could provide privileges to execute malicious commands on a system. |
STIG | Date |
---|---|
VMware ESX 3 Server | 2016-05-13 |
Check Text ( C-2089r2_chk ) |
---|
Perform the following to check for unnecessary privileged accounts: # more /etc/passwd Some examples of unnecessary privileged accounts include halt, shutdown, reboot and who. |
Fix Text (F-4179r2_fix) |
---|
Remove any special privilege accounts, such as shutdown and halt, from the /etc/passwd and /etc/shadow files. |