The Group Identifiers (GIDs) reserved for AIX system accounts must not be assigned to non-system accounts as their primary group GID.
An XCCDF Rule
Description
Reserved GIDs are typically used by system software packages. If non-system groups have GIDs in this range, they may conflict with system software, possibly leading to the group having permissions to modify system files.
- ID
- SV-215194r991589_rule
- Version
- AIX7-00-001035
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Change the primary GID for non-system accounts that have reserved GIDs as their primary GIDs using the following command:
# chuser pgrp=<non_reserved_group_name> <non_system_user_name>