TMA-GITLAB-4.2.3
Ensure user access to the package registry utilizes Multi- Factor Authentication (MFA)
Descripción
Enforce Multi-Factor Authentication (MFA) for user access to the package registry. By default, every user authenticates to the system by password only. If a user's password is compromised, the user account and all its related packages are in danger of data theft and malicious builds. It is therefore recommended that each user enables Multi-Factor Authentication. This additional step guarantees that the account stays secure even if the user's password is compromised, as it adds another layer of authentication.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
For each package registry in use, verify that Multi-Factor Authentication is enforced and is the only way to authenticate. - On the left sidebar, at the bottom, select Admin Area. - Select Settings > General. - Expand Sign-in restrictions: - Check if Enforce two-factor authentication is enabled. If so, you are compliant.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
For each package registry in use, enforce Multi-Factor Authentication as the only way to authenticate. - On the left sidebar, at the bottom, select Admin Area. - Select Settings > General. - Expand Sign-in restrictions: - Select Enforce two-factor authentication to enable this feature.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- access-controlauthdevsecopsgitlabmfa
- Referencia
- CIS GitLab Benchmark v1.0.1 - 4.2.3 Ensure user access to the package registry utilizes Multi- Factor Authentication (MFA)