Check for Remote Consoles

MediumLevel 1Automatedsolaris

Description

The consadm command can be used to select or display alternate console devices. Since the system console has special properties to handle emergency situations, it is important to ensure that the console is in a physically secure location and that unauthorized consoles have not been defined. Audit: applies to the global zone.

How it is checked

Audit method: Shell command

shell

command -v consadm >/dev/null 2>&1 || exit 1; out=$( { consadm -p ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Expected output: compliant

How it is fixed

Fix method: Guidance or infrastructure patch

Perform the following to implement the recommended state: # /usr/sbin/consadm [-d device...]

Properties

Operating systems: Any
Tags: solarishardening
Reference: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 9.1 Check for Remote Consoles

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target solaris