Verify User Who Owns Backup gshadow File
An XCCDF Rule
Description
To properly set the owner of /etc/gshadow-, run the command:
$ sudo chown root /etc/gshadow-
Rationale
The /etc/gshadow- file is a backup of /etc/gshadow, and as such,
it contains group password hashes. Protection of this file is critical for system security.
- ID
- xccdf_org.ssgproject.content_rule_file_owner_backup_etc_gshadow
- Severity
- Medium
- References
- Updated
Remediation - Shell Script
chown 0 /etc/gshadow-
Remediation - Ansible
- name: Test for existence /etc/gshadow-
stat:
path: /etc/gshadow-
register: file_exists
tags:
- NIST-800-53-AC-6 (1)