Set "mesg n" as Default for All Users

低レベル 1自動solaris

説明

The "mesg n" command blocks attempts to use the write or talk commands to contact users at their terminals, but has the side effect of slightly strengthening permissions on the user's tty device. Since write and talk are no longer widely used at most sites, the incremental security increase is worth the loss of functionality. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.

チェック方法

監査方法: シェルコマンド

shell

r=compliant; grep -q "^mesg n" /etc/.login 2>/dev/null || r="mesg n missing in /etc/.login"; grep -q "^mesg n" /etc/profile 2>/dev/null || r="mesg n missing in /etc/profile"; echo "$r"

期待される出力: compliant

修正方法

修正方法: ガイダンスまたは IaC パッチ

Perform the following to implement the recommended state: # cd /etc # for file in profile .login ; do if [ "`grep mesg $file`" ]; then awk '$1 == "mesg" { $2 = "n" } { print }' $file > $file.CIS mv $file.CIS $file else echo mesg n >> $file fi done

プロパティ

オペレーティングシステム: すべて
タグ: solarisaccounts
参照: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 7.5 Set "mesg n" as Default for All Users

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target solaris