TMA-COS-5.4
Ensure root login is restricted to system console
ВисокаНиво 1Ручни прегледcos
Опис
The file /etc/securetty contains a list of valid terminals that may be logged in directly as root. Since the system console has special properties to handle emergency situations, it is important to ensure that the console is in a physically secure location and that unauthorized consoles have not been defined.
Како се проверава
Метод провере: Ручни преглед
Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.
# cat /etc/securetty
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Remove entries for any consoles that are not in a physically secure location.
Својства
- Оперативни системи
- Било који
- Ознаке
- container-optimized-oscoslogging
- Референца
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 5.4 Ensure root login is restricted to system console