V-921

CAT II (Medium)

All shell files must be owned by root or bin.

Rule ID

SV-45172r1_rule

STIG

Version

V1R12

CCIs

If shell files are owned by users other than root or bin, they could be modified by intruders or malicious users to perform unauthorized actions.

Check the ownership of the system shells.
# cat /etc/shells | xargs -n1 ls -l
If any shell is not owned by root or bin, this is a finding.

Change the ownership of the shell with incorrect ownership.
# chown root <shell>