Ensure the admin user shell is clish

SedangLevel 1Otomatischeckpoint

Deskripsi

Giving admin the Expert bash shell by default bypasses clish role controls. PASS requires 'set user admin shell /etc/cli.sh'. Audited against the Gaia clish 'show configuration' output.

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^set user admin shell /etc/cli\.sh[ \t]*$

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

set user admin shell /etc/cli.sh save config WebUI: User Management > Users > admin > Shell = /etc/cli.sh.

Properti

Sistem operasi: Apa saja
Tag: checkpointauthenticationmanagement
Referensi: CIS Check Point Firewall Benchmark - User Management - Admin shell (verify section number for your Gaia release)

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target checkpoint