Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-48081 | SOL-11.1-070120 | SV-60953r1_rule | Medium |
Description |
---|
User groups must be assigned unique GIDs for accountability and to ensure appropriate access protections. |
STIG | Date |
---|---|
Solaris 11 X86 Security Technical Implementation Guide | 2015-12-07 |
Check Text ( C-50513r4_chk ) |
---|
The root role is required. Check that group IDs are unique. # getent group | cut -f3 -d":" | sort -n | uniq -c |\ while read x ; do [ -z "${x}" ] && break set - $x if [ $1 -gt 1 ]; then grps=`getent group | nawk -F: '($3 == n) { print $1 }' n=$2 | xargs` echo "Duplicate GID ($2): ${grps}" fi done If output is produced, this is a finding. |
Fix Text (F-51689r1_fix) |
---|
The root role is required. Work with each respective group owner to remediate this issue and ensure that the group ownership of their files are set to an appropriate value. |