Check that the Banner Setting for telnet is Null

RendahLevel 1Otomatissolaris

Deskripsi

The BANNER variable in the file /etc/default/telnetd can be used to display text before the telnet login prompt. Traditionally, it has been used to display the OS level of the target system. The warning banner provides information that can be used in reconnaissance for an attack. By default, this file is distributed with the BANNER variable set to null. Audit: pattern match on /etc/default/telnetd as described in the CIS audit procedure.

Cara pemeriksaan

Metode audit: Pola file

File: /etc/default/telnetd
Pola: (?m)^BANNER=\s*$

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Perform the following to implement the recommended state: # cd /etc/default # awk '/^BANNER=/ { $1 = "BANNER=" }; { print }' telnetd > telnetd.CIS # mv telnetd.CIS telnetd

Properti

Sistem operasi: Apa saja
Tag: solarisnetwork
Referensi: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 8.5 Check that the Banner Setting for telnet is Null

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target solaris