Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ======6.1.2 Ensure permissions on /etc/passwd are configured (Scored)====== =====Profile Applicability===== <code> Level 1 - Server Level 1 - Workstation </code> =====Description===== The ''/etc/passwd'' file contains user account information that is used by many system utilities and therefore must be readable for these utilities to operate. =====Rationale===== It is critical to ensure that the ''/etc/passwd'' file is protected from unauthorized write access. Although it is protected by default, the file permissions could be changed either inadvertently or through malicious actions. =====Audit===== Run the following command and verify ''Uid'' and ''Gid'' are both ''0/root'' and ''Access'' is ''644'': <Code:bash> # stat /etc/passwd Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root) </Code> =====Remediation===== Run the following command to set permissions on ''/etc/passwd'': <Code:bash> # chown root:root /etc/passwd # chmod 644 /etc/passwd </Code> centos7/6/1/2.txt Last modified: 2017/05/04 19:51by Piotr Kłoczewski