Ensure an Inventory of Administrator accounts is established and maintained

低レベル 1手動レビューaix

説明

AIX defines Administrator accounts with the with the attribute admin. When true the account is Administrator and when false the account is considered User. An inventory of accounts with the attribute "admin=true" allows verification that all accounts considered administrative are so labeled by the system.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Verify that there is, off system, an inventory of Administrative accounts and that the date is not more 13 weeks old.

修正方法

修正方法: ガイダンスまたは IaC パッチ

A printable report can be prepared using the following example: cnt=0 printf "%4s%68s\n" "AIX" "Administator Accounts" lsuser -R files -a admin ALL | while read usr adm; do if [[ ${adm} = "admin=true" ]] ; then printf "%12s" ${usr} let cnt=cnt+1 [[ $(expr ${cnt} % 6) == 0 ]] && print fi done [[ $(expr ${cnt} % 6) != 0 ]] && print

プロパティ

オペレーティングシステム: すべて
タグ: aixaccounts
参照: CIS IBM AIX 7 Benchmark v1.2.0 - 5.1.4 Ensure an Inventory of Administrator accounts is established and maintained