Azure Container Linux
TMA-AZURE-CONTAINER-LINUX-7.2.7
Ensure no duplicate group names exist
SrednjaNivo 1Automatskaazure-container-linux
Opis
Although the groupadd program will not let you create a duplicate group name, it is possible for an administrator to manually edit the /etc/group file and change the group name. Audit: Passes when no value of field 1 in /etc/group appears more than once.
Kako se proverava
Metod provere: Komanda ljuske
shell
cut -d: -f1 /etc/group | sort | uniq -d | grep -q . && echo noncompliant || echo compliant- Očekivani izlaz
compliant
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Based on the results of the audit script, establish unique names for the user groups. File group ownerships will automatically reflect the change as long as the groups have unique GIDs.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- azure-container-linuxaccounts
- Referenca
- CIS Azure Container Linux Benchmark v1.0.0 - 7.2.7 Ensure no duplicate group names exist
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target azure-container-linux