Ensure no legacy "+" entries exist in /etc/shadow

SedangLevel 1Tinjauan manualcos

Deskripsi

The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on most systems, but may exist in files that have been imported from other platforms. These entries may provide an avenue for attackers to gain privileged access on the system.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Run the following command and verify that no output is returned: # grep '^\+:' /etc/shadow

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Remove any legacy '+' entries from /etc/shadow if they exist.

Properti

Sistem operasi: Apa saja
Tag: container-optimized-oscos
Referensi: CIS Google Container-Optimized OS Benchmark v1.2.0 - 6.2.3 Ensure no legacy "+" entries exist in /etc/shadow