TMAegis
Više pravila za azure-container-linux

TMA-AZURE-CONTAINER-LINUX-7.2.2

Ensure /etc/shadow password fields are not empty

VisokaNivo 1Automatskaazure-container-linux

Opis

An account with an empty password field means that anybody may log in as that user without providing a password. Audit: Passes when no account in /etc/shadow has an empty password field (needs root).

Kako se proverava

Metod provere: Komanda ljuske

shell
[ -r /etc/shadow ] || exit 1; awk -F: '($2 == ""){f=1} END{exit f}' /etc/shadow && echo compliant || echo noncompliant
Očekivani izlaz
compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

If any accounts in the /etc/shadow file do not have a password, run the following command to lock the account until it can be determined why it does not have a password: # passwd -l <username> Also, check to see if the account is logged in and investigate what it is being used for to determine if it needs to be forced off.

Svojstva

Operativni sistemi
Bilo koji
Oznake
azure-container-linuxaccounts
Referenca
CIS Azure Container Linux Benchmark v1.0.0 - 7.2.2 Ensure /etc/shadow password fields are not empty

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target azure-container-linux