UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The /etc/passwd file must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22332 GEN001378 SV-26425r1_rule ECLP-1 Medium
Description
The /etc/passwd file contains the list of local system accounts. It is vital to system security and must be protected from unauthorized modification.
STIG Date
SOLARIS 10 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2018-04-10

Details

Check Text ( C-27501r1_chk )
Verify the /etc/passwd file is owned by root.

Procedure:
# ls -l /etc/passwd
If the file is not owned by root, this is a finding.
Fix Text (F-23612r1_fix)
Change the owner of the /etc/passwd file to root.

# chown root /etc/passwd