https://secscan.acron.pl/ 2026-08-31T09:45:43+00:00 https://secscan.acron.pl/ https://secscan.acron.pl/lib/tpl/bootstrap3/images/favicon.ico text/html 2017-05-04T20:01:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/1?rev=1493920894&do=diff 6.2.1 Ensure password fields are not empty (Scored) Profile Applicability Description An account with an empty password field means that anybody may log in as that user without providing a password. Rationale All accounts must have passwords or be locked to prevent the account from being used by an unauthorized user. text/html 2017-05-04T20:01:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/2?rev=1493920906&do=diff 6.2.2 Ensure no legacy "+" entries exist in /etc/passwd (Scored) Profile Applicability Description The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on most systems, but may exist in files that have been imported from other platforms. text/html 2017-05-04T20:02:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/3?rev=1493920920&do=diff 6.2.3 Ensure no legacy "+" entries exist in /etc/shadow (Scored) Profile Applicability Description The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on most systems, but may exist in files that have been imported from other platforms. text/html 2017-05-04T20:02:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/4?rev=1493920930&do=diff 6.2.4 Ensure no legacy "+" entries exist in /etc/group (Scored) Profile Applicability Description The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on most systems, but may exist in files that have been imported from other platforms. text/html 2017-05-04T20:02:22+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/5?rev=1493920942&do=diff 6.2.5 Ensure root is the only UID 0 account (Scored) Profile Applicability Description Any account with UID 0 has superuser privileges on the system. Rationale This access must be limited to only the default root account and only from the system console. Administrative access must be through an unprivileged account using an approved mechanism as noted in Item 5.6 Ensure access to the su command is restricted. text/html 2017-05-04T20:02:58+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/6?rev=1493920978&do=diff 6.2.6 Ensure root PATH Integrity (Scored) Profile Applicability Description The root user can execute any command on the system and could be fooled into executing programs unintentionally if the PATH is not set correctly. Rationale Including the current working directory (.) or other writable directory in text/html 2017-05-04T20:03:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/7?rev=1493921018&do=diff 6.2.7 Ensure all users' home directories exist (Scored) Profile Applicability Description Users can be defined in /etc/passwd without a home directory or with a home directory that does not actually exist. Rationale If the user's home directory does not exist or is unassigned, the user will be placed in text/html 2017-05-04T20:03:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/8?rev=1493921036&do=diff 6.2.8 Ensure users' home directories permissions are 750 or more restrictive (Scored) Profile Applicability Description While the system administrator can establish secure permissions for users' home directories, the users can easily override these. text/html 2017-05-04T20:04:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/9?rev=1493921050&do=diff 6.2.9 Ensure users own their home directories (Scored) Profile Applicability Description The user home directory is space defined for the particular user to set local environment variables and to store personal files.. Rationale Since the user is accountable for files stored in the user home directory, the user must be the owner of the directory. text/html 2017-05-04T20:04:30+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/10?rev=1493921070&do=diff 6.2.10 Ensure users' dot files are not group or world writable (Scored) Profile Applicability Description While the system administrator can establish secure permissions for users' “dot” files, the users can easily override these. Rationale text/html 2017-05-04T20:04:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/11?rev=1493921096&do=diff 6.2.11 Ensure no users have .forward files (Scored) Profile Applicability Description The .forward file specifies an email address to forward the user's mail to. Rationale Use of the .forward file poses a security risk in that sensitive data may be inadvertently transferred outside the organization. The text/html 2017-05-04T20:05:12+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/12?rev=1493921112&do=diff 6.2.12 Ensure no users have .netrc files (Scored) Profile Applicability Description The .netrc file contains data for logging into a remote host for file transfers via FTP. Rationale The .netrc file presents a significant security risk since it stores passwords in unencrypted form. Even if text/html 2017-05-04T20:05:28+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/13?rev=1493921128&do=diff 6.2.13 Ensure users' .netrc Files are not group or world accessible (Scored) Profile Applicability Description While the system administrator can establish secure permissions for users' .netrc files, the users can easily override these. Rationale text/html 2017-05-04T20:05:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/14?rev=1493921154&do=diff 6.2.14 Ensure no users have .rhosts files (Scored) Profile Applicability Description While no .rhosts files are shipped by default, users can easily create them. Rationale This action is only meaningful if .rhosts support is permitted in the file text/html 2017-05-04T20:06:12+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/15?rev=1493921172&do=diff 6.2.15 Ensure all groups in /etc/passwd exist in /etc/group (Scored) Profile Applicability Description Over time, system administration errors and changes can lead to groups being defined in /etc/passwd but not in /etc/group. Rationale Groups defined in the text/html 2017-05-04T20:06:28+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/16?rev=1493921188&do=diff 6.2.16 Ensure no duplicate UIDs exist (Scored) Profile Applicability Description Although the useradd program will not let you create a duplicate User ID (UID), it is possible for an administrator to manually edit the /etc/passwd file and change the UID field. text/html 2017-05-04T20:06:48+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/17?rev=1493921208&do=diff 6.2.17 Ensure no duplicate GIDs exist (Scored) Profile Applicability Description Although the groupadd program will not let you create a duplicate Group ID (GID), it is possible for an administrator to manually edit the /etc/group file and change the GID field. text/html 2017-05-04T20:07:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/18?rev=1493921236&do=diff 6.2.18 Ensure no duplicate user names exist (Scored) Profile Applicability Description Although the useradd program will not let you create a duplicate user name, it is possible for an administrator to manually edit the /etc/passwd file and change the user name. text/html 2017-05-04T20:07:50+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/6/2/19?rev=1493921270&do=diff 6.2.19 Ensure no duplicate group names exist (Scored) Profile Applicability Description Although the groupadd program will not let you create a duplicate group name, it is possible for an administrator to manually edit the /etc/group file and change the group name.