Disable Host-based Authentication for Login-based Services

ВисокаНиво 1Аутоматскаsolaris

Опис

The .rhosts files are used for automatic login to remote hosts and contain username and hostname combinations. The .rhosts files are unencrypted (usually group- or world-readable) and present a serious risk in that a malicious user could use the information within to gain access to a remote host with the privileges of the original application or user. Audit: no uncommented pam_rhosts_auth entry may exist in /etc/pam.conf or /etc/pam.d/*.

Како се проверава

Метод провере: Команда љуске

shell

command -v grep >/dev/null 2>&1 || exit 1; out=$( { grep -h pam_rhosts_auth /etc/pam.conf /etc/pam.d/* | grep -v "^[[:blank:]]*#" ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Очекивани излаз: compliant

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Edit /etc/pam.conf and any /etc/pam.d/* results from audit procedure and comment out or remove any pam_rhosts_auth lines: #rlogin auth sufficient pam_rhosts_auth.so.1 #rsh auth sufficient pam_rhosts_auth.so.1

Својства

Оперативни системи: Било који
Ознаке: solarisaccounts
Референца: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.10 Disable Host-based Authentication for Login-based Services

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target solaris