openstack/ansible-hardening
Code Issues Proposed changes
Files
0e8feaf9eb5265dcef8682d596e62063f7120a92
ansible-hardening/doc/metadata/rhel7/RHEL-07-020300.rst
Major Hayden d5ee4c331c Check for groups that don't exist [+Docs] 
The STIG requires that all GIDs in `/etc/passwd` are present in
`/etc/group` and this patch adds a check for that condition.

Documentation is included.

Implements: blueprint security-rhel7-stig
Change-Id: If6657bd91b5f77c2a7da534d763d3f4c5dc8e0cf
2016-12-08 09:44:23 -06:00

266 B
Raw Blame History

---id: RHEL-07-020300 status: implemented tag: auth ---

If any users are found with invalid GIDs, those users are printed in the Ansible output. Deployers should review the list and ensure all users are assigned to a valid group that is defined in /etc/group.