/etc/shadow and gshadow mode 0400 or 0?

Shawn Wells shawn at redhat.com
Fri Aug 31 19:10:40 UTC 2012


On 8/31/12 3:02 PM, Steve Grubb wrote:
> On Friday, August 31, 2012 02:48:24 PM Kenneth Stailey wrote:
>> Is it better to change /etc/shadow and gshadow to 0400
>> or use the mode 0 that the files are distributed from Red Hat with?
> Use the mode RHEL6 is shipped with. Its more restrictive.
>
> -Steve

Also note those CCE's are for RHEL5 [buried in 
cce.mitre.org/lists/data/downloads/cce-rhel5-5.20111007.xls ]. We 
inherited them when creating the initial port/update of the SSG from 
RHEL5 to RHEL6... eventually RHEL6 CCEs will be created.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20120831/dfaa1096/attachment.html>


More information about the scap-security-guide mailing list