Navigate

Check: GEN000000-HPUX0360

HP-UX 11.31 STIG: GEN000000-HPUX0360 (in versions v1 r19 through v1 r13)

Title

The /etc/pam.conf file must be owned by root. (Cat II impact)

Discussion

/etc/pam.conf file is the system configuration file for the Pluggable Authentication Module (PAM) architecture. It supports per user authentication, account, session, and password management. If the configuration is modified maliciously, users may gain unauthorized system access.

Check Content

If the system is configured for Trusted Mode, this check is not applicable. For SMSE: Verify the file is owned by root. # ls -lL /etc/pam.conf If the file is not owned by root, this is a finding.

Fix Text

If the system is operating in Trusted Mode, no fix is required. For SMSE: As root, change the file ownership. # chown root /etc/pam.conf

Additional Identifiers

Rule ID: SV-52461r1_rule

Vulnerability ID: V-40473

Group Title: GEN000000-HPUX0360

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000366	The organization implements the security configuration settings.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-6	Configuration Settings