Verify root login is disabled

VisokaNivo 1Automatskaarista-eos

Opis

EOS can be configured to allow logging in as root directly by using the aaa root secret config command. This should be not be enabled. An authenticated, authorized user can obtain superuser access after logging in by accessing the bash shell if permitted. Allowing remote root login bypasses the EOS cli and gives direct access to the bash shell. Audited against the output of 'show running-config' (not 'show running-config all').

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^no aaa root\s*$

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Reset to default value default aaa root

Svojstva

Operativni sistemi: Bilo koji
Oznake: arista-eosnetworklogging
Referenca: CIS Arista EOS Benchmark v1.0.0 - 2.1.4 Verify root login is disabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target arista-eos