The root shell must be located in the / file system.

From Oracle Linux 5 Security Technical Implementation Guide

Part of GEN001080

Associated with: CCI-000366

SV-64441r1_rule The root shell must be located in the / file system.

Vulnerability discussion

To ensure the root shell is available in repair and administrative modes, the root shell must be located in the / file system.

Check content

Determine if root's shell executable resides on a dedicated file system. Procedure: Find the location of the root user's shell # grep "^root" /etc/passwd|cut -d: -f7|cut -d/ -f2 The result is the top level directory under / where the shell resides (e.g., usr) Check if it is on a dedicated file system. # grep / /etc/fstab If / is on a dedicated file system, this is a finding.

Fix text

Change the root account's shell to one present on the / file system. Procedure: Edit /etc/passwd and change the shell for the root account to one present on the / file system (such as /bin/sh, assuming /bin is not on a separate file system). If the system does not store shell configuration in the /etc/passwd file, consult vendor documentation for the correct procedure for the system.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer