STIG: Clean Up Dangerous Accounts

MediumLinux Security20-25 min

The brief

An audit of this host turned up three classic account findings: a second account with UID 0 (a hidden root), two accounts sharing one UID, and an account with no password at all. Remediate all three to the DISA STIG baseline: root must be the only UID-0 account, every account must have a unique UID, and no account may have an empty password. Grading reads /etc/passwd and /etc/shadow the way an assessor would.

What you'll do

root is the only account with UID 0
no two accounts share a UID
no account has an empty password

Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.