Ensure permissions on /etc/master.passwd are configured

보통레벨 1자동freebsd

설명

The /etc/master.passwd file is used to store the information about user accounts that is critical to the security of those accounts, such as the hashed password and other security information. If attackers can gain read access to the /etc/master.passwd file, they can easily run a password cracking program against the hashed password to break it. Audit: /etc/master.passwd must be mode 0000 and owned by root:wheel, as stated by CIS.

점검 방법

감사 방식: 셸 명령

shell

r=compliant; for f in /etc/master.passwd; do if [ -e "$f" ]; then set -- $(ls -ld "$f"); s=$(printf '%s %s %s\n' "$1" "$3" "$4" | awk -v m='---------' -v o='root' -v g='wheel' '{ok=1; for(i=1;i<=9;i++) if(substr(m,i,1)=="-" && substr($1,i+1,1)!="-") ok=0; if(o!="" && $2 !~ ("^(" o ")$")) ok=0; if(g!="" && $3 !~ ("^(" g ")$")) ok=0; print (ok ? "ok" : $0)}'); [ "$s" = ok ] || r="$f: $s"; else r="$f: missing"; fi; done; echo "$r"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Run the following commands to set mode, owner, and group on /etc/master.passwd: # chown root:wheel /etc/master.passwd # chmod 0000 /etc/master.passwd

속성

운영 체제: 모두
태그: freebsdpermissions
참고 자료: CIS FreeBSD 14 Benchmark v1.0.1 - 6.1.3 Ensure permissions on /etc/master.passwd are configured

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target freebsd