IBM AIX
TMA-AIX-6.1.1
Ensure sudo is installed
TinggiLevel 2Otomatisaix
Deskripsi
The recommendation is to install and configure sudo, to reflect the privileged command access requirements of all users of the system. Privileged command access should be limited to and defined by a user's individual needs. Access to a root command prompt should limited, wherever possible, to minimize the risk of inadvertent or deliberate misuse of the account. Audit: sudo must be installed at version 1.9.17p1 or later.
Cara pemeriksaan
Metode audit: Perintah shell
shell
command -v sudo >/dev/null 2>&1 || exit 1; v=$(sudo -V 2>/dev/null | sed -n "1s/^Sudo version //p"); [ -n "$v" ] || exit 1; printf '%s\n' "$v" | awk -F"[.p]" '{a=$1*1000000+$2*10000+$3*100+($4==""?0:$4); print (a>=1091701 ? "compliant" : "sudo " $0 " is older than 1.9.17p1")}'- Output yang diharapkan
compliant
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Install the latest available version for the sudo distribution installed on your system. This version should be 1.9.17p1 or later.
Properti
- Sistem operasi
- Apa saja
- Tag
- aixservices
- Referensi
- CIS IBM AIX 7 Benchmark v1.2.0 - 6.1.1 Ensure sudo is installed
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target aix --level 2