Restrict root Login to System Console

TinggiLevel 1Otomatissolaris

Deskripsi

Privileged access to the system via root must be accountable to a particular user. Use an authorized mechanism such as RBAC and the su command to provide administrative access to unprivileged accounts. These mechanisms provide an audit trail in the event of problems. Audit: pattern match on /etc/default/login as described in the CIS audit procedure.

Cara pemeriksaan

Metode audit: Pola file

File: /etc/default/login
Pola: (?m)^CONSOLE=/dev/console\s*$

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Perform the following to implement the recommended state: # cd /etc/default # awk '/CONSOLE=/ { print "CONSOLE=/dev/console"; next }; { print }' login > login.CIS # mv login.CIS login

Properti

Sistem operasi: Apa saja
Tag: solarisaccounts
Referensi: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.16 Restrict root Login to System Console

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target solaris