https://secscan.acron.pl/ 2026-08-31T09:45:45+00:00 https://secscan.acron.pl/ https://secscan.acron.pl/lib/tpl/bootstrap3/images/favicon.ico text/html 2017-05-04T19:50:24+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/1?rev=1493920224&do=diff 6.1.1 Audit system file permissions (Not Scored) Profile Applicability Description The Debian package manager has a number of useful options. One of these, the --verify option, can be used to verify that system packages are correctly installed. The text/html 2017-05-04T19:51:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/2?rev=1493920268&do=diff 6.1.2 Ensure permissions on /etc/passwd are configured (Scored) Profile Applicability Description The /etc/passwd file contains user account information that is used by many system utilities and therefore must be readable for these utilities to operate. text/html 2017-05-04T19:54:14+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/3?rev=1493920454&do=diff 6.1.3 Ensure permissions on /etc/shadow are configured (Scored) Profile Applicability Description The /etc/shadow file is used to store the information about user accounts that is critical to the security of those accounts, such as the hashed password and other security information. text/html 2017-05-04T19:54:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/4?rev=1493920486&do=diff 6.1.4 Ensure permissions on /etc/group are configured (Scored) Profile Applicability Description The /etc/group file contains a list of all the valid groups defined in the system. The command below allows read/write access for root and read access for everyone else. text/html 2017-05-04T19:57:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/5?rev=1493920636&do=diff 6.1.5 Ensure permissions on /etc/shadow are configured (Scored) Profile Applicability Description The /etc/gshadow file is used to store the information about groups that is critical to the security of those accounts, such as the hashed password and other security information. text/html 2017-05-04T19:58:06+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/6?rev=1493920686&do=diff 6.1.6 Ensure permissions on /etc/passwd- are configured (Scored) Profile Applicability Description The /etc/passwd- file contains backup user account information. Rationale It is critical to ensure that the /etc/passwd- file is protected from unauthorized access. Although it is protected by default, the file permissions could be changed either inadvertently or through malicious actions. text/html 2017-05-04T19:58:28+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/7?rev=1493920708&do=diff 6.1.7 Ensure permissions on /etc/shadow- are configured (Scored) Profile Applicability Description The /etc/shadow- file is used to store backup information about user accounts that is critical to the security of those accounts, such as the hashed password and other security information. text/html 2017-05-04T19:58:52+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/8?rev=1493920732&do=diff 6.1.8 Ensure permissions on /etc/group- are configured (Scored) Profile Applicability Description The /etc/group- file contains a backup list of all the valid groups defined in the system. Rationale It is critical to ensure that the /etc/group- file is protected from unauthorized access. Although it is protected by default, the file permissions could be changed either inadvertently or through malicious actions.. text/html 2017-05-04T19:59:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/9?rev=1493920748&do=diff 6.1.9 Ensure permissions on /etc/gshadow- are configured (Scored) Profile Applicability Description The /etc/gshadow- file is used to store backup information about groups that is critical to the security of those accounts, such as the hashed password and other security information. text/html 2017-05-04T19:59:28+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/10?rev=1493920768&do=diff 6.1.10 Ensure no world writable files exist (Scored) Profile Applicability Description Unix-based systems support variable settings to control access to files. World writable files are the least secure. See the chmod(2) man page for more information. text/html 2017-05-04T19:59:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/11?rev=1493920786&do=diff 6.1.11 Ensure no unowned files or directories exist (Scored) Profile Applicability Description Sometimes when administrators delete users from the password file they neglect to remove all files owned by those users from the system. Rationale A new user who is assigned the deleted user's user ID or group ID may then end up text/html 2017-05-04T20:00:02+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/12?rev=1493920802&do=diff 6.1.12 Ensure no ungrouped files or directories exist (Scored) Profile Applicability Description Sometimes when administrators delete users or groups from the system they neglect to remove all files owned by those users or groups. Rationale A new user who is assigned the deleted user's user ID or group ID may then end up text/html 2017-05-04T20:00:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/13?rev=1493920826&do=diff 6.1.13 Audit SUID executables (Not Scored) Profile Applicability Description The owner of a file can set the file's permissions to run with the owner's or group's permissions, even if the user running the program is not the owner or a member of the group. The most common reason for a SUID program is to enable users to perform functions (such as changing their password) that require root privileges.. text/html 2017-05-04T20:00:40+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/1/14?rev=1493920840&do=diff 6.1.14 Audit SGID executables (Not Scored) Profile Applicability Description The owner of a file can set the file's permissions to run with the owner's or group's permissions, even if the user running the program is not the owner or a member of the group. The most common reason for a SGID program is to enable users to perform functions (such as changing their password) that require root privileges.