Check: GEN000000-IRIX00440
IRIX 6.5:
GEN000000-IRIX00440
(in versions v1 r1 through v1 r0.6)
Title
The root account must be the only account with GID of 0. (Cat I impact)
Discussion
Accounts with a GID of 0 have root group privileges.
Check Content
Check passwd and group files for non-root user ids and group ids with a GID of 0. # cat /etc/passwd # cat /etc/group Confirm the only account with a group id of 0 is root. If the root account is not the only account with GID of 0, this is a finding.
Fix Text
Change the default GID of non-root accounts to a valid GID other than 0.
Additional Identifiers
Rule ID:
Vulnerability ID: V-12033
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000225 |
The organization employs the concept of least privilege, allowing only authorized accesses for users (and processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions. |
CCI-000764 |
The information system uniquely identifies and authenticates organizational users (or processes acting on behalf of organizational users). |