Linux distributions
TMA-RHEL10-7.2.3
Ensure all groups in /etc/passwd exist in /etc/group
SedangLevel 1Otomatislinux
Deskripsi
Over time, system administration errors and changes can lead to groups being defined in /etc/passwd but not in /etc/group .
Cara pemeriksaan
Metode audit: Perintah shell
shell
alt0() { o=$(bash -c '#!/usr/bin/env bash
{
a_passwd_group_gid=("$(awk -F: '"'"'{print $4}'"'"' /etc/passwd | sort -u)")
a_group_gid=("$(awk -F: '"'"'{print $3}'"'"' /etc/group | sort -u)")
a_passwd_group_diff=("$(printf '"'"'%s\n'"'"' "${a_group_gid[@]}" "${a_passwd_group_gid[@]}" | sort | uniq -u)")
while IFS= read -r l_gid; do
awk -F: '"'"'($4 == '"'"'"$l_gid"'"'"') {print " - User: \"" $1 "\" has GID: \"" $4 "\" which does not exist in /etc/group" }'"'"' /etc/passwd
done < <(printf '"'"'%s\n'"'"' "${a_passwd_group_gid[@]}" "${a_passwd_group_diff[@]}" | sort | uniq -D | uniq)
unset a_passwd_group_gid; unset a_group_gid; unset a_passwd_group_diff
}' 2>&1); [ -z "$o" ] || { echo "step1: $o" | head -c 300; return 1; }; }; if alt0; then echo compliant; fi- Output yang diharapkan
compliant
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Analyze the output of the Audit step above and perform the appropriate action to correct any discrepancies found.
Properti
- Sistem operasi
- rhel-10
- Tag
- cis-convertedlinux
- Referensi
- CIS Red Hat Enterprise Linux 10 Benchmark v1.0.1 - 7.2.3
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target linux