STIGQter: STIG Summary: Solaris 10 SPARC Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

All GIDs referenced in the /etc/passwd file must be defined in the /etc/group file.

DISA Rule

SV-226447r603265_rule

Vulnerability Number

V-226447

Group Title

SRG-OS-000480

Rule Version

GEN000380

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Add a group to the system for each GID referenced that does not have a corresponding group.

#/usr/sbin/groupadd < group >

Check Contents

Perform the following to ensure there are no GIDs referenced in /etc/passwd not defined in /etc/group.
# logins -o | awk -F: '$3 == ""'
If any lines are returned, there are GIDs referenced in /etc/passwd that are not defined in /etc/group, this is a finding.

Vulnerability Number

V-226447

Documentable

False

Rule Version

GEN000380

Severity Override Guidance

Perform the following to ensure there are no GIDs referenced in /etc/passwd not defined in /etc/group.
# logins -o | awk -F: '$3 == ""'
If any lines are returned, there are GIDs referenced in /etc/passwd that are not defined in /etc/group, this is a finding.

Check Content Reference

M

Target Key

4060

Comments