Disable login: Services on Serial Ports

보통레벨 1자동solaris

설명

The svccfg command provides service administration for the lower level of the Service Access Facility hierarchy and can be used to disable the ability to login on a particular port. Login services should not be enabled on any serial ports that are not strictly required to support the mission of the system. This action can be safely performed even when console access is provided using a serial port. Audit: `svcs -Ho state` must report disabled; a service that is not installed is compliant.

점검 방법

감사 방식: 셸 명령

shell

command -v svcs >/dev/null 2>&1 || exit 1; r=compliant; for f in svc:/system/console-login:terma svc:/system/console-login:termb; do st=$(svcs -Ho state "$f" 2>/dev/null); case "$st" in ''|disabled) ;; *) r="$f: $st";; esac; done; echo "$r"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

svcadm disable svc:/system/console-login:terma svc:/system/console-login:termb

속성

운영 체제: 모두
태그: solarisaccounts
참고 자료: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.1 Disable login: Services on Serial Ports

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target solaris