Skip to content

RHEL 9 /etc/gshadow- file must be owned by root.

An XCCDF Rule

Description

The "/etc/gshadow-" file is a backup of "/etc/gshadow", and as such, contains group password hashes. Protection of this file is critical for system security.

ID
SV-257904r991589_rule
Version
RHEL-09-232120
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Change the owner of the file /etc/gshadow- to root by running the following command:

$ sudo chown root /etc/gshadow-