TMAegis
Више правила за ros

TMA-ROS1-6.2.1

Ensure password fields are not empty

ВисокаНиво 1Аутоматскаros

Опис

An account with an empty password field means that anybody may log in as that user without providing a password. The audit requires every account in /etc/shadow to have a non-empty password field. Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.

Како се проверава

Метод провере: Команда љуске

shell
[ -r /etc/shadow ] || exit 1
u=$(awk -F: '($2 == "") {print $1}' /etc/shadow)
[ -z "$u" ] && echo compliant || echo "accounts without password: $(printf '%s ' $u)"
Очекивани излаз
compliant

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

If any accounts in the /etc/shadow file do not have a password, run the following command to lock the account until it can be determined why it does not have a password: # passwd -l <username> Also, check to see if the account is logged in and investigate what it is being used for to determine if it needs to be forced off.

Својства

Оперативни системи
Било који
Ознаке
rosros1melodicmaintenance
Референца
CIS ROS Melodic Benchmark v1.0.0 - 6.2.1 Ensure password fields are not empty

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell
tmaegis scan --target ros