[PATCH] Use mode 0 for shadow and gshadow files

Kenneth Stailey kstailey.lists at gmail.com
Wed Sep 5 00:50:24 UTC 2012


From: "Kenneth Stailey" <kstailey.lists at gmail.com>

By using mode 0 for the /etc/shadow and /etc/gshadow files
we avoid switching to a less restrictive protection mode
and avoid having the file permissions to deviate from the
permissions recorded in the RPM database.

Kenneth Stailey (1):
  Use mode 0 instead of 0400 for shadow and gshadow files

 .../input/checks/file_permissions_etc_gshadow.xml  |    2 +-
 RHEL6/input/checks/file_permissions_etc_shadow.xml |    2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

-- 
1.7.9



More information about the scap-security-guide mailing list