10.3 Set Default Group for root Account

Information

The usermod command can be used to specify which group the root user belongs to. This affects permissions of files that are created by the root user. Using GID 0 for the root account helps prevent root -owned files from accidentally becoming accessible to non-privileged users.

Solution

# usermod -g 0 root

See Also

https://workbench.cisecurity.org/files/85

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2c.

Plugin: Unix

Control ID: 5ee95a7ebe51f354b9d2805a96ce279d37e0c0289897a0aa6a39d7c451322208