Lock Inactive User Accounts

SedangLevel 1Otomatissolaris

Deskripsi

Guidelines published by the U.S. Department of Defense specify that user accounts must be locked out after 35 days of inactivity. This number may vary based on the particular site's policy. Inactive accounts pose a threat to system security since the users are not logging in to notice failed login attempts or other anomalies. Audit: the useradd default inactive value (definact in /usr/sadm/defadduser, shown by useradd -D) must be 1-35 days; check existing accounts with logins -axo.

Cara pemeriksaan

Metode audit: Pola file

File: /usr/sadm/defadduser
Pola: (?m)^definact=([1-9]|[12][0-9]|3[0-5])\s*$

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

useradd -D -f 35 (and for existing accounts: usermod -f 35 <user>)

Properti

Sistem operasi: Apa saja
Tag: solarisaccounts
Referensi: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 7.6 Lock Inactive User Accounts

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target solaris