TMA-AIX-4.8.2
Ensure root user default shell is ksh
HighLevel 1Automatedaix
Description
Ensure that the shell for the root user is set to /usr/bin/ksh Although the bash shell is available there are administrative processes that require the root user to be configured with the ksh shell as its default shell. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.
How it is checked
Audit method: Shell command
shell
command -v lsuser >/dev/null 2>&1 || exit 1; lsuser -a shell root 2>/dev/null- Expected output
root shell=/usr/bin/ksh
How it is fixed
Fix method: Guidance or infrastructure patch
Execute the following command chuser shell=/usr/bin/ksh root
Properties
- Operating systems
- Any
- Tags
- aixaccounts
- Reference
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.8.2 Ensure root user default shell is ksh
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target aix