GEN000000-LNX00320 - The system must not have special privilege accounts, such as shutdown and halt - '/etc/passwd - halt'

Gavin M. Dennis

22 April 2022 20:56

Details

If special privilege accounts are compromised, the accounts could provide privileges to execute malicious commands on a system.

Solution

Remove any special privilege accounts, such as shutdown and halt, from the /etc/passwd and /etc/shadow files using the 'userdel' or 'system-config-users' commands.

Supportive Information

The following resource is also helpful.

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Access Control, Identification and Authentication.This control applies to the following type of system Unix.

References

800-53|AC-6
800-53|IA-2
CAT|I
CCI|CCI-000225
CCI|CCI-000764
Group-ID|V-4268
Rule-ID|SV-37181r1_rule
STIG-ID|GEN000000-LNX00320
Vuln-ID|V-4268

Source

Tenable.com/audits

PS. Before you go.

Request a quote to protect your organisation from cyber attacks and breaches.

Was this article helpful?

0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.

Articles in this section