TMA-OPNSENSE-3.3
Ensure default password of admin is changed
MediumLevel 1Automatedopnsense
Description
Ensure the default password is changed for the root user. Using default passwords for the 'root' account could cause a compromise to the system.
How it is checked
Audit method: Configuration pattern
- Pattern
<sshguard_blocktime>(?:[3-9]\d\d|\d{4,})</sshguard_blocktime>
How it is fixed
Fix method: Guidance or infrastructure patch
In the GUI: - Navigate to System > Access > Users - Click the Pencil Icon under 'Commands' - Change the password of the default 'root' user account. - Click 'Save' at the bottom of the page.
Properties
- Operating systems
- Any
- Tags
- authopnsense
- Reference
- CIS OPNsense Benchmark v1.0.0 - 3.3 Ensure default password of admin is changed
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target opnsense