Check: GEN000290-2
SUSE Linux Enterprise Server v11 for System z STIG:
GEN000290-2
(in versions v1 r12 through v1 r9)
Title
The system must not have the unnecessary news account. (Cat II impact)
Discussion
Accounts that provide no operational purpose provide additional opportunities for system compromise. Unnecessary accounts include user accounts for individuals not requiring access to the system and application accounts for applications not installed on the system.
Check Content
Check the system for the unnecessary "news" accounts. Procedure: # rpm -q inn If the "inn" is installed the "news" user is necessary and this is not a finding. # grep ^news /etc/passwd If this account exists and "inn" is not installed, this is a finding.
Fix Text
Remove the "news" account from the /etc/passwd file before connecting a system to the network.
Additional Identifiers
Rule ID: SV-44796r1_rule
Vulnerability ID: V-27275
Group Title: GEN000290-2
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000012 |
The organization reviews information system accounts for compliance with account management requirements per organization-defined frequency. |
Controls
| Number | Title |
|---|---|
| AC-2 |
Account Management |