TMA-SOLARIS-2.7
Disable Kerberos TGT Expiration Warning
FaibleNiveau 1Automatiséesolaris
Description
The Kerberos TGT warning service is used to warn users when their Kerberos tickets are about to expire or to renew those tickets before they expire. This service is not used if Kerberos has not been configured. This service is configured to be "local only" by default. This service should be disabled if it is not required. Audit: `svcs -Ho state` must report disabled or uninitialized; a service that is not installed is compliant.
Méthode de vérification
Méthode d'audit: Commande shell
shell
command -v svcs >/dev/null 2>&1 || exit 1; r=compliant; for f in svc:/network/security/ktkt_warn; do st=$(svcs -Ho state "$f" 2>/dev/null); case "$st" in ''|disabled|uninitialized) ;; *) r="$f: $st";; esac; done; echo "$r"- Sortie attendue
compliant
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
svcadm disable svc:/network/security/ktkt_warn
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- solarishardening
- Référence
- CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 2.7 Disable Kerberos TGT Expiration Warning
Vérifier cet hôte
Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.
shell
tmaegis scan --target solaris