Disable "nobody" Access for RPC Encryption Key Storage Service

TinggiLevel 1Otomatissolaris

Deskripsi

This action listed prevents keyserv from using default keys for the nobody user, effectively stopping the nobody user from accessing information via Secure RPC. If login by the user nobody is allowed for secure RPC, there is an increased risk of system compromise. Audit: compliant when keyserv is not installed.

Cara pemeriksaan

Metode audit: Perintah shell

shell

f=/etc/default/keyserv; [ -f "$f" ] || { echo compliant; exit 0; }; grep -q "^ENABLE_NOBODY_KEYS=NO" "$f" && echo compliant || echo "ENABLE_NOBODY_KEYS is not NO"

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Perform the following to implement the recommended state: # cd /etc/default # cp keyserv keyserv.orig # awk '/ENABLE_NOBODY_KEYS=/ { $1 = "ENABLE_NOBODY_KEYS=NO" } { print }' keyserv > keyserv.CIS # mv keyserv.CIS keyserv

Properti

Sistem operasi: Apa saja
Tag: solarisnetwork
Referensi: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.14 Disable "nobody" Access for RPC Encryption Key Storage Service

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target solaris