======6.2.3 Ensure no legacy "+" entries exist in /etc/shadow (Scored)======
=====Profile Applicability=====
Level 1 - Server
Level 1 - Workstation
=====Description=====
The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on most systems, but may exist in files that have been imported from other platforms.
=====Rationale=====
These entries may provide an avenue for attackers to gain privileged access on the system.
=====Audit=====
Run the following command and verify that no output is returned:
# grep '^+:' /etc/shadow
=====Remediation=====
Remove any legacy '+' entries from ''/etc/shadow'' if they exist.