12.1 Verify Permissions on /etc/passwd

Information

The /etc/passwd file contains user account information that is used by many system utilities and therefore must be readable for these utilities to operate. It is critical to ensure that the /etc/passwd file is protected from unauthorized write access. Although it is protected by default, the file permissions could be changed either inadvertently or through malicious actions.

Solution

If the permissions of the /etc/passwd file are incorrect, run the following command to correct them- # /bin/chmod 644 /etc/passwd

See Also

https://workbench.cisecurity.org/files/85

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(6), CSCv6|3.1

Plugin: Unix

Control ID: 20c7772471ea141fdba04df6fce79f60caa7daa96ee6038e738c7ac8707fe9c4