Title

The /etc/gshadow file must have mode 0000. (Cat II impact)

Discussion

The /etc/gshadow file contains group password hashes. Protection of this file is critical for system security.

Check Content

To check the permissions of "/etc/gshadow", run the command: $ ls -l /etc/gshadow If properly configured, the output should indicate the following permissions: "----------" If it does not, this is a finding.

Fix Text

To properly set the permissions of "/etc/gshadow", run the command: # chmod 0000 /etc/gshadow

Additional Identifiers

Rule ID: SV-217876r603264_rule

Vulnerability ID: V-217876

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.