Ensure sshd access is configured

보통레벨 1자동aix

설명

There are several options available to limit which users and group can access the system via SSH. It is recommended that at least one of the following options be leveraged: AllowUsers: o The AllowUsers variable gives the system administrator the option of allowing specific users to ssh into the system. The list consists of space separated user names. Audit: sshd -T must show at least one AllowUsers/AllowGroups/DenyUsers/DenyGroups; review the lists against site policy.

점검 방법

감사 방식: 셸 명령

shell

command -v sshd >/dev/null 2>&1 || exit 1; out=$(sshd -T 2>/dev/null) || exit 1; r=compliant; for p in '^(allowusers|allowgroups|denyusers|denygroups)[[:blank:]]+[^[:blank:]]'; do printf '%s\n' "$out" | grep -Eiq -- "$p" || r="not matched: $p"; done; echo "$r"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Edit the /etc/ssh/sshd_config file to set one or more of the parameter above any Match set entries as follows: AllowUsers <userlist> -OR- AllowGroups <grouplist> -OR- DenyUsers <userlist> -OR- DenyGroups <grouplist> Re-cycle the sshd daemon to pick up the configuration changes: stopsrc -s sshd startsrc -s sshd Note: First occurrence of a option takes precedence, Match set statements withstanding.

속성

운영 체제: 모두
태그: aixssh
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.3.4 Ensure sshd access is configured

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aix