TMA-COS-6.2.3
Ensure no legacy "+" entries exist in /etc/shadow
Description
The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on most systems, but may exist in files that have been imported from other platforms. These entries may provide an avenue for attackers to gain privileged access on the system.
Méthode de vérification
Méthode d'audit: Revue manuelle
Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.
Run the following command and verify that no output is returned: # grep '^\+:' /etc/shadow
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
Remove any legacy '+' entries from /etc/shadow if they exist.
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- container-optimized-oscos
- Référence
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 6.2.3 Ensure no legacy "+" entries exist in /etc/shadow