Cis Ubuntu1204 V110 10 3

Set Default Group for root Account

cyberstrikeus Updated

File contents

10.3 Set Default Group for root Account (Scored)

Profile Applicability

  • Level 1

Description

The usermod command can be used to specify which group the root user belongs to. This affects permissions of files that are created by the root user.

Rationale

Using GID 0 for the root account helps prevent root-owned files from accidentally becoming accessible to non-privileged users.

Audit Procedure

Using Command Line

grep "^root:" /etc/passwd | cut -f4 -d:

Expected Result

The command should return 0.

Remediation

Using Command Line

usermod -g 0 root

Default Value

GID 0 is the default group for root.

References

  • CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0

Profile

Level 1 - Scored

cyberstrikeus/cyberstrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-12-04-lts-server-benchmark/cis-ubuntu1204-v110-10-3 commit 80e2aa4044

Frequently asked questions

npx skillmds@latest add cyberstrikeus/cis-ubuntu1204-v110-10-3