AIX system must restrict the ability to switch to the root user to members of a defined group.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-215338 | SRG-OS-000480-GPOS-00227 | AIX7-00-003030 | SV-215338r991589_rule | 2026-02-06 | 3 |
Description
Configuring a supplemental group for users permitted to switch to the root user prevents unauthorized users from accessing the root account, even with knowledge of the root credentials.
ℹ️ Check
Examine the "sugroups" of the root user. Generally only users in the adm group should have su to root capacity.
Run the following command:
# lsuser -a sugroups root
root sugroups=system,staff,security
If "sugroups" is blank or "ALL", this is a finding.
✔️ Fix
Use the "chsec" command to only allow users in the adm group to su to root:
# chsec -f /etc/security/user -s root -a sugroups=adm