Check: GEN001391
HP-UX 11.31 STIG:
GEN001391
(in versions v1 r19 through v1 r13)
Title
The /etc/group file must be owned by bin. (Cat II impact)
Discussion
The /etc/group file is critical to system security and must be owned by a privileged user. The group file contains a list of system groups and associated information.
Check Content
Verify the /etc/group file is owned by bin. # ls -lL /etc/group If the file is not owned by bin, this is a finding.
Fix Text
Change the owner of the /etc/group file to bin. # chown bin /etc/group
Additional Identifiers
Rule ID: SV-38337r1_rule
Vulnerability ID: V-22335
Group Title: GEN001391
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000225 |
The organization employs the concept of least privilege, allowing only authorized accesses for users (and processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions. |
Controls
Number | Title |
---|---|
AC-6 |
Least Privilege |