Ensure an Inventory of user accounts is established and maintained

NiedrigStufe 1Manuelle Prüfungaix

Beschreibung

AIX defines Administrator accounts with the with the attribute admin. When true the account is Administrator and when false the account is considered User. An inventory of accounts with the attribute "admin=true" allows verification that all accounts considered administrative are so labeled by the system.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Verify that there is, off system, an inventory of User (not Administrative) accounts and that the date is not more 13 weeks old.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

A printable report can be prepared using the following example: cnt=0 printf "%4s%68s\n" "AIX" "User Accounts" lsuser -R files -a admin ALL | while read usr adm; do if [[ ${adm} = "admin=false" ]] ; then printf "%12s" ${usr} let cnt=cnt+1 [[ $(expr ${cnt} % 6) == 0 ]] && print fi done [[ $(expr ${cnt} % 6) != 0 ]] && print

Eigenschaften

Betriebssysteme: Beliebig
Tags: aixaccounts
Referenz: CIS IBM AIX 7 Benchmark v1.2.0 - 5.1.5 Ensure an Inventory of user accounts is established and maintained