https://secscan.acron.pl/ 2026-08-31T09:45:44+00:00 https://secscan.acron.pl/ https://secscan.acron.pl/lib/tpl/bootstrap3/images/favicon.ico text/html 2017-05-06T15:08:52+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/5/4/1?rev=1494076132&do=diff 5.4.1 Set Shadow Password Suite Parameters List of content 1 index Description While a majority of the password control parameters have been moved to PAM, some parameters are still available through the shadow password suite. Any changes made to /etc/login.defs text/html 2017-05-04T19:43:02+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/5/4/2?rev=1493919782&do=diff 5.4.2 Ensure system accounts are non-login (Scored) Profile Applicability Description There are a number of accounts provided with Ubuntu that are used to manage applications and are not intended to provide an interactive shell. Rationale It is important to make sure that accounts that are not being used by regular users are prevented from being used to provide an interactive shell. By default, Ubuntu sets the password field for these accounts to an invalid string, but it is also recommende… text/html 2017-05-04T19:43:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/5/4/3?rev=1493919806&do=diff 5.4.3 Ensure default group for the root account is GID 0 (Scored) Profile Applicability Description The usermod command can be used to specify which group the root user belongs to. This affects permissions of files that are created by the root user. text/html 2017-05-04T19:45:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/5/4/4?rev=1493919956&do=diff 5.4.4 Ensure default user umask is 027 or more restrictive (Scored) Profile Applicability Description The default umask determines the permissions of files created by users. The user creating the file has the discretion of making their files and directories readable by others via the chmod command. Users who wish to allow their files and directories to be readable by others by default may choose a different default umask by inserting the