Skip to content

7.2.1 Ensure accounts in /etc/passwd use shadowed passwords

Audit#

Run the following command and verify that no output is returned:

# awk -F: '($2 != "x" ) { print "User: \"" $1 "\" is not set to shadowed passwords "}' /etc/passwd

Remediation#

Run the following command to set accounts to use shadowed passwords and migrate passwords in /etc/passwd to /etc/shadow:

# pwconv

Investigate to determine if the account is logged in and what it is being used for, to determine if it needs to be forced off.