Disable Host-based Authentication for Login-based Services

HochStufe 1Automatisiertsolaris

Beschreibung

The .rhosts files are used for automatic login to remote hosts and contain username and hostname combinations. The .rhosts files are unencrypted (usually group- or world-readable) and present a serious risk in that a malicious user could use the information within to gain access to a remote host with the privileges of the original application or user. Audit: no uncommented pam_rhosts_auth entry may exist in /etc/pam.conf or /etc/pam.d/*.

So wird geprüft

Prüfmethode: Shell-Befehl

shell

command -v grep >/dev/null 2>&1 || exit 1; out=$( { grep -h pam_rhosts_auth /etc/pam.conf /etc/pam.d/* | grep -v "^[[:blank:]]*#" ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Erwartete Ausgabe: compliant

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Edit /etc/pam.conf and any /etc/pam.d/* results from audit procedure and comment out or remove any pam_rhosts_auth lines: #rlogin auth sufficient pam_rhosts_auth.so.1 #rsh auth sufficient pam_rhosts_auth.so.1

Eigenschaften

Betriebssysteme: Beliebig
Tags: solarisaccounts
Referenz: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.10 Disable Host-based Authentication for Login-based Services

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target solaris