Set "mesg n" as Default for All Users

낮음레벨 1자동solaris

설명

The "mesg n" command blocks attempts to use the write or talk commands to contact users at their terminals, but has the side effect of slightly strengthening permissions on the user's tty device. Since write and talk are no longer widely used at most sites, the incremental security increase is worth the loss of functionality. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.

점검 방법

감사 방식: 셸 명령

shell

r=compliant; grep -q "^mesg n" /etc/.login 2>/dev/null || r="mesg n missing in /etc/.login"; grep -q "^mesg n" /etc/profile 2>/dev/null || r="mesg n missing in /etc/profile"; echo "$r"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Perform the following to implement the recommended state: # cd /etc # for file in profile .login ; do if [ "`grep mesg $file`" ]; then awk '$1 == "mesg" { $2 = "n" } { print }' $file > $file.CIS mv $file.CIS $file else echo mesg n >> $file fi done

속성

운영 체제: 모두
태그: solarisaccounts
참고 자료: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 7.5 Set "mesg n" as Default for All Users

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target solaris