Description: The /etc/shadow- file is used to store backup information about user accounts that is critical to the security of those accounts, such as the hashed password and other security information. Rationale: It is critical to ensure that the /etc/shadow- file is protected from unauthorized access. Although it is protected by default, the file permissions could be changed either inadvertently or through malicious actions. Audit: Run the following command and verify verify Uid is 0/root, Gid is 0/root or /shadow, and Access is 640 or more restrictive: # stat /etc/shadow-Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root) Remediation: Run the one of the following chown commands as appropriate and the chmod to set permissions on /etc/shadow- : # chown root:root /etc/shadow-OR # chown root:shadow /etc/shadow- # chmod u-x,go-rwx /etc/shadow-

[perm_000, root, root]

Run the one of the following chown commands as appropriate and the chmod to set permissions on /etc/shadow- : # chown root:root /etc/shadow-OR # chown root:shadow /etc/shadow- # chmod u-x,go-rwx /etc/shadow-