Details

Restricts access to root, via su, to members of a specific group.

In setting the sugroups attribute to system, this ensures that only members of the system group are able to su root. This makes it difficult for an attacker to use a stolen root password as the attacker first has to get access to a system user ID.

Solution

In /etc/security/user, set the root stanza sugroups attribute to system-

chuser su=true sugroups=system root

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/528

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-6(10)

Source

• Tenable.com/audits