Verify root login is disabled

TinggiLevel 1Otomatisarista-eos

Deskripsi

EOS can be configured to allow logging in as root directly by using the aaa root secret config command. This should be not be enabled. An authenticated, authorized user can obtain superuser access after logging in by accessing the bash shell if permitted. Allowing remote root login bypasses the EOS cli and gives direct access to the bash shell. Audited against the output of 'show running-config' (not 'show running-config all').

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^no aaa root\s*$

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

! Reset to default value default aaa root

Properti

Sistem operasi: Apa saja
Tag: arista-eosnetworklogging
Referensi: CIS Arista EOS Benchmark v1.0.0 - 2.1.4 Verify root login is disabled

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target arista-eos