TMA-GITLAB-1.3.1
Ensure inactive users are reviewed and removed periodically
Описание
Track inactive user accounts and periodically remove them. User accounts that have been inactive for a long period of time are enlarging the surface of attack. Inactive users with high-level privileges are of particular concern, as these accounts are more likely to be targets for attackers. This could potentially allow access to large portions of an organization should such an attack prove successful. It is recommended to remove them as soon as possible in order to prevent this.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
As an Administrator: - Navigate to the Admin Area - In the sidebar, select Users - Select the 'Deactivated' filter tab - Identify if any users are present - Select the 'Active' filter tab - Sort by 'Oldest updated' - Use the 'Last activity' column to determine which users are inactive
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
As an Administrator: - Navigate to the Admin Area - In the sidebar, select Users - Next to each inactive user, select the vertical ellipsis - Select either 'Block' (recommended), 'Delete user', or 'Delete user and contributions' Perform the following steps as an Administrator to automatically deactivate dormant users: - Navigate to the Admin Area - Select Settings > General. - Expand the Account and limit section. - Under Dormant users, check Deactivate dormant users after a period of inactivity. - Under Days of inactivity before deactivation, enter the number of days before deactivation. Minimum value is 90 days. - Select Save changes.
Свойства
- Операционные системы
- Любая
- Теги
- devsecopsgitlab
- Источник
- CIS GitLab Benchmark v1.0.1 - 1.3.1 Ensure inactive users are reviewed and removed periodically