Check: GEN001475
SOLARIS 9 SPARC STIG:
GEN001475
(in version v1 r12)
Title
The /etc/group file must not contain any group password hashes. (Cat II impact)
Discussion
Group passwords are typically shared and should not be used. Additionally, if password hashes are readable by non-administrators, the passwords are subject to attack through lookup tables or cryptographic weaknesses in the hashes.
Check Content
Fix Text
Edit /etc/group and change the password field to an exclamation point (!) to lock the group password.
Additional Identifiers
Rule ID: SV-26447r1_rule
Vulnerability ID: V-22348
Group Title: GEN001475
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000225 |
Employ the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) which are necessary to accomplish assigned organizational tasks. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AC-6 |
Least Privilege |