Ensure permissions on /etc/shadow- are configured

SrednjaNivo 1Automatskalinux

Opis

The /etc/shadow- file is used to store backup information about user accounts that is critical to the security of those accounts, such as the hashed password and other security information.

Kako se proverava

Metod provere: Komanda ljuske

shell

alt0() { command -v stat >/dev/null 2>&1 || { echo "step1: stat not installed"; return 1; }; o=$(bash -c 'stat /etc/shadow-' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'Access: (0000/----------) Uid: ( 0/ root) Gid: ( 0/ root)' || { echo step1: missing 'Access: (0000/----------) Uid: ( 0/ root) Gid: ( 0/ root)'; return 1; }; }; if alt0; then echo compliant; fi

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Run the following commands to set permissions on /etc/shadow-: # chown root:root /etc/shadow- # chmod 000 /etc/shadow-

Svojstva

Operativni sistemi: alinux-2
Oznake: cis-convertedlinux
Referenca: CIS Aliyun Linux 2 Benchmark v1.0.0 ARCHIVE - 6.1.7

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target linux