Ensure an Inventory of Administrator accounts is established and maintained

낮음레벨 1수동 검토aix

설명

AIX defines Administrator accounts with the with the attribute admin. When true the account is Administrator and when false the account is considered User. An inventory of accounts with the attribute "admin=true" allows verification that all accounts considered administrative are so labeled by the system.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Verify that there is, off system, an inventory of Administrative accounts and that the date is not more 13 weeks old.

조치 방법

조치 방식: 가이드 또는 인프라 패치

A printable report can be prepared using the following example: cnt=0 printf "%4s%68s\n" "AIX" "Administator Accounts" lsuser -R files -a admin ALL | while read usr adm; do if [[ ${adm} = "admin=true" ]] ; then printf "%12s" ${usr} let cnt=cnt+1 [[ $(expr ${cnt} % 6) == 0 ]] && print fi done [[ $(expr ${cnt} % 6) != 0 ]] && print

속성

운영 체제: 모두
태그: aixaccounts
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 5.1.4 Ensure an Inventory of Administrator accounts is established and maintained