Ensure all local user accounts have valid stanzas in /etc/security/passwd

СредњаНиво 1Аутоматскаaix

Опис

AIX uses two files to store information about local user accounts, the traditional /etc/passwd and also /etc/security/passwd. This latter file stores hashed passwords and metadata about the user account such as the last password change and whether the account is permitted to login. If an account exists that does not have a valid stanza in /etc/security/passwd then it is possible that under certain combinations of circumstances this is equivalent to that account having a blank password and thus multiple users may access the account ... Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.

Како се проверава

Метод провере: Команда љуске

shell

command -v pwdck >/dev/null 2>&1 || exit 1; out=$( { pwdck -n ALL ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Очекивани излаз: compliant

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Run the one of the following commands to remediate the identified issues: pwdck -t ALL -- OR -- pwdck -y ALL Note: Running the command with the -t flag will provide information about each action and prompt you to approve, whilst running it with the -y flag will automatically fix all errors and report the changes.

Својства

Оперативни системи: Било који
Ознаке: aixaccounts
Референца: CIS IBM AIX 7 Benchmark v1.2.0 - 5.1.6 Ensure all local user accounts have valid stanzas in /etc/security/passwd

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target aix