TMA-SOLARIS-9.12
Check for Presence of User .rhosts Files
AltaNivel 1Automatizadasolaris
Descripción
While no .rhosts files are shipped with Solaris, users can easily create them. This action is only meaningful if .rhosts support is permitted in the PAM configuration. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.
Cómo se verifica
Método de auditoría: Comando de shell
shell
command -v logins >/dev/null 2>&1 || exit 1; out=$( { for dir in $(logins -ox | awk -F: '($8 == "PS") { print $6 }'); do find "$dir"/.rhosts -type f -ls; done ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20- Salida esperada
compliant
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Correct or justify any items discovered in the Audit step. Determine if any user .rhosts files are present in user directories and work with those users to determine the best course of action in accordance with site policy.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- solarisaccounts
- Referencia
- CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 9.12 Check for Presence of User .rhosts Files
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
shell
tmaegis scan --target solaris