Verify Only Group Root Has GID 0
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください。
Description
If any group other than root has a GID of 0, this misconfiguration should
be investigated and the groups other than root should be removed or have
their GID changed.
Rationale
Ensuring that only the root
group has a GID of 0 helps prevent
root group owned files from becoming accidentally accessible to
non-privileged users.
Warning
This rule doesn’t come with a remediation. The removal of groups from a system
or reassigning the GID is considered too disruptive.