Ensure /etc/master.passwd password fields are not empty

How it is checked

Audit method: Shell command

command -v awk >/dev/null 2>&1 || exit 1; [ -r /etc/master.passwd ] || exit 1; out=$( { awk -F: '($2 == "") { print $1 " does not have a password" }' /etc/master.passwd ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Expected output

compliant

How it is fixed

Fix method: Guidance or infrastructure patch

If any accounts in the /etc/master.passwd file do not have a password, run the following command to lock the account until it can be determined why it does not have a password: # pw lock <username> Also, check to see if the account is logged in and investigate what it is being used for to determine if it needs to be forced off.

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

tmaegis scan --target freebsd