Check: GEN000000-SOL00220
SOLARIS 9 SPARC STIG:
GEN000000-SOL00220
(in version v1 r12)
Title
The /usr/aset/userlist file must exist. (Cat II impact)
Discussion
If the userlist file does not exist, then an unauthorized user may exist in the /etc/passwd file.
Check Content
Fix Text
Create the /usr/aset/userlist file and populate it with a list of authorized users.
Additional Identifiers
Rule ID: SV-955r2_rule
Vulnerability ID: V-955
Group Title: GEN000000-SOL00220
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
Number | Definition |
---|---|
CCI-000032 |
The information system enforces information flow control using organization-defined security policy filters as a basis for flow control decisions for organization-defined information flows. |
CCI-000366 |
The organization implements the security configuration settings. |