Check Point
TMA-CHECKPOINT-ADMIN-SHELL
Ensure the admin user shell is clish
SrednjaNivo 1Automatskacheckpoint
Opis
Giving admin the Expert bash shell by default bypasses clish role controls. PASS requires 'set user admin shell /etc/cli.sh'. Audited against the Gaia clish 'show configuration' output.
Kako se proverava
Metod provere: Obrazac konfiguracije
- Obrazac
(?m)^set user admin shell /etc/cli\.sh[ \t]*$
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
set user admin shell /etc/cli.sh save config WebUI: User Management > Users > admin > Shell = /etc/cli.sh.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- checkpointauthenticationmanagement
- Referenca
- CIS Check Point Firewall Benchmark - User Management - Admin shell (verify section number for your Gaia release)
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target checkpoint