Ensure nologin is not listed in /etc/shells

NiedrigStufe 2Automatisiertlinux

Beschreibung

/etc/shells is a text file which contains the full pathnames of valid login shells. This file is consulted by chsh and available to be queried by other programs. Be aware that there are programs which consult this file to find out if a user is a normal user; for example, FTP daemons traditionally disallow access to users with shells not included in this file.

So wird geprüft

Prüfmethode: Shell-Befehl

shell

alt0() { command -v grep >/dev/null 2>&1 || { echo "step1: grep not installed"; return 1; }; o=$(bash -c 'grep -Ps '"'"'^\h*([^#\n\r]+)?\/nologin\b'"'"' /etc/shells' 2>/dev/null); [ -z "$o" ] || { echo "step1: $o" | head -c 300; return 1; }; }; if alt0; then echo compliant; fi

Erwartete Ausgabe: compliant

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Edit /etc/shells and remove any lines that include nologin

Eigenschaften

Betriebssysteme: ubuntu-20.04
Tags: cis-convertedlinux
Referenz: CIS Ubuntu Linux 20.04 LTS Benchmark v3.0.0 - 5.4.3.1

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target linux --level 2