Details

If the ‘/etc/passwd’ file is writable by a group-owner or the world the risk of its compromise is increased. The file contains the list of accounts on the system and associated information, and protection of this file is critical for system security.

Solution

To properly set the permissions of ‘/etc/passwd’, run the command:

# chmod 0644 /etc/passwd

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_6_V1R18_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6b.
• CAT|II
• CCI|CCI-000366
• CSCv6|3.1
• Group-ID|V-50773
• Rule-ID|SV-208818r603263_rule
• STIG-ID|OL6-00-000041
• STIG-Legacy|SV-64979
• STIG-Legacy|V-50773
• Vuln-ID|V-208818

Source

• Tenable.com/audits