/etc/shadow and gshadow mode 0400 or 0?
Shawn Wells
shawn at redhat.com
Fri Aug 31 19:10:40 UTC 2012
On 8/31/12 3:02 PM, Steve Grubb wrote:
> On Friday, August 31, 2012 02:48:24 PM Kenneth Stailey wrote:
>> Is it better to change /etc/shadow and gshadow to 0400
>> or use the mode 0 that the files are distributed from Red Hat with?
> Use the mode RHEL6 is shipped with. Its more restrictive.
>
> -Steve
Also note those CCE's are for RHEL5 [buried in
cce.mitre.org/lists/data/downloads/cce-rhel5-5.20111007.xls ]. We
inherited them when creating the initial port/update of the SSG from
RHEL5 to RHEL6... eventually RHEL6 CCEs will be created.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20120831/dfaa1096/attachment.html>
More information about the scap-security-guide
mailing list