TMA-SOLARIS-6.16
Restrict root Login to System Console
HighLevel 1Automatedsolaris
Description
Privileged access to the system via root must be accountable to a particular user. Use an authorized mechanism such as RBAC and the su command to provide administrative access to unprivileged accounts. These mechanisms provide an audit trail in the event of problems. Audit: pattern match on /etc/default/login as described in the CIS audit procedure.
How it is checked
Audit method: File pattern
- File
/etc/default/login- Pattern
(?m)^CONSOLE=/dev/console\s*$
How it is fixed
Fix method: Guidance or infrastructure patch
Perform the following to implement the recommended state: # cd /etc/default # awk '/CONSOLE=/ { print "CONSOLE=/dev/console"; next }; { print }' login > login.CIS # mv login.CIS login
Properties
- Operating systems
- Any
- Tags
- solarisaccounts
- Reference
- CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.16 Restrict root Login to System Console
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target solaris