Ensure password fields are not empty

So wird geprüft

Prüfmethode: Shell-Befehl

[ -r /etc/shadow ] || exit 1
u=$(awk -F: '($2 == "") {print $1}' /etc/shadow)
[ -z "$u" ] && echo compliant || echo "accounts without password: $(printf '%s ' $u)"

Erwartete Ausgabe

compliant

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

If any accounts in the /etc/shadow file do not have a password, run the following command to lock the account until it can be determined why it does not have a password: # passwd -l <username> Also, check to see if the account is logged in and investigate what it is being used for to determine if it needs to be forced off.

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

tmaegis scan --target ros