Ensure no unowned or ungrouped files or directories exist

AltaNivel 1Automatizadafreebsd

Descripción

Administrators may delete users or groups from the system and neglect to remove all files and/or directories owned by those users or groups. A new user or group who is assigned a deleted user's user ID or group ID may then end up "owning" a deleted user or group's files, and thus have more access on the system than was intended. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.

Cómo se verifica

Método de auditoría: Comando de shell

shell

command -v find >/dev/null 2>&1 || exit 1; out=$( { find / -xdev \( -nouser -o -nogroup \) -print ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Remove or set ownership and group ownership of these files and/or directories to an active user on the system as appropriate.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: freebsdaccounts
Referencia: CIS FreeBSD 14 Benchmark v1.0.1 - 6.1.6 Ensure no unowned or ungrouped files or directories exist

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target freebsd