Navigate

Check: GEN001373

Solaris 10 X86 STIG: GEN001373 (in versions v2 r4 through v1 r17)

Title

The /etc/nsswitch.conf file must have mode 0644 or less permissive. (Cat II impact)

Discussion

The nsswitch.conf file (or equivalent) configures the source of a variety of system security information including account, group, and host lookups. Malicious changes could prevent the system from functioning or compromise system security.

Check Content

Check the mode of the /etc/nsswitch.conf file. Procedure: # ls -l /etc/nsswitch.conf If the file mode is more permissive than 0644, this is a finding.

Fix Text

Change the mode of the /etc/nsswitch.conf file to 0644 or less permissive. Procedure: # chmod 0644 /etc/nsswitch.conf

Additional Identifiers

Rule ID: SV-227638r603266_rule

Vulnerability ID: V-227638

Group Title: SRG-OS-000480

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000366	The organization implements the security configuration settings.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-6	Configuration Settings