TMAegis
aix 관련 규칙 더 보기

IBM AIX

TMA-AIX-4.6.1.8

Ensure CDE login screen hostname is masked

낮음레벨 1자동aix

설명

The Dtlogin*greeting.labelString parameter is the message displayed in the first dialogue box on the CDE login screen. This is where the username is entered. The Dtlogin*greeting.persLabelString is the message displayed in the second dialogue box on the CDE login screen. This is where the password is entered. Audit: compliant when CDE is not installed.

점검 방법

감사 방식: 셸 명령

shell
r=compliant; for file in /usr/dt/config/*/Xresources; do [ -f "$file" ] || continue; e=$(echo "$file" | sed -e s/usr/etc/); if [ ! -f "$e" ]; then r="missing $e"; else grep -q "Dtlogin\*greeting.labelString:" "$e" || r="$e: missing greeting.labelString"; grep -q "Dtlogin\*greeting.persLabelString:" "$e" || r="$e: missing greeting.persLabelString"; fi; done; echo "$r"
예상 출력
compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Copy the files from /usr/dt/config/*/Xresources to /etc/dt/config/*/Xresources and add the Dtlogin*greeting.labelString and Dtlogin*greeting.persLabelString parameters to all copied Xresources files: for file in /usr/dt/config/*/Xesources; do etc_file=`echo $file | sed -e s/usr/etc/` echo "\nupdating config file "$etc_file"..." if [[ ! -f $etc_file ]]; then dir=`dirname $file | sed -e s/usr/etc/` mkdir -p $dir cp $file $etc_file fi WARN="Authorized uses only. All activity may be monitored and reported." cp $etc_file $etc_file.bak grep -v 'Dtlogin\*greeting.labelString:' $etc_file > $etc_file.sav grep -v 'Dtlogin\*greeting.persLabelString:' $etc_file.sav > $etc_file echo "Dtlogin*greeting.labelString: $WARN" >> $etc_file echo "Dtlogin*greeting.persLabelString: $WARN" >> $etc_file rm $etc_file.sav done WARN="Authorized uses only. All activity may be monitored and reported." echo "Dtlogin*greeting.labelString: $WARN" >> $dir/Xresources echo "Dtlogin*greeting.persLabelString: $WARN" >> $dir/Xresources done

속성

운영 체제
모두
태그
aixaccounts
참고 자료
CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.1.8 Ensure CDE login screen hostname is masked

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell
tmaegis scan --target aix