← Back to Solaris 11 SPARC Security Technical Implementation Guide

V-216438

CAT II (Medium)

The root account must be the only account with GID of 0.

Rule ID

SV-216438r959010_rule

STIG

Solaris 11 SPARC Security Technical Implementation Guide

Version

V3R5

CCIs

CCI-000366

Discussion

All accounts with a GID of 0 have root group privileges and must be limited to the group account only.

Check Content

Identify any users with GID of 0.

# awk -F: '$4 == 0' /etc/passwd
# awk -F: '$3 == 0' /etc/group
Confirm the only account with a group id of 0 is root.

If the root account is not the only account with GID of 0, this is a finding.

Fix Text

The root role is required.

Change the default GID of non-root accounts to a valid GID other than 0.