Linux distributions
TMA-ALMA9-5.2.8
Ensure sudo pwfeedback is configured
SrednjaNivo 1Automatskalinux
Opis
The pwfeedback option provides visual feedback (for example, an asterisk) for each character as the sudo password is typed. When not enabled (the default), no feedback is displayed.
Kako se proverava
Metod provere: Komanda ljuske
shell
alt0() { command -v grep >/dev/null 2>&1 || { echo "step1: grep not installed"; return 1; }; o=$(bash -c 'grep -rPi -- '"'"'^\h*Defaults\h+([^#]+,\h*)?pwfeedback\b'"'"' /etc/sudoers /etc/sudoers.d/' 2>/dev/null); [ -z "$o" ] || { echo "step1: $o" | head -c 300; return 1; }; }; if alt0; then echo compliant; fi- Očekivani izlaz
compliant
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Ensure sudo does not display feedback while the password is typed. Edit the appropriate sudoers file with visudo and remove any line that enables pwfeedback, or explicitly disable it: # visudo Add or correct the line: Defaults !pwfeedback
Svojstva
- Operativni sistemi
- almalinux-9
- Oznake
- cis-convertedlinux
- Referenca
- CIS AlmaLinux OS 9 Benchmark v3.0.0 - 5.2.8
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target linux