TMA-COS-5.4
Ensure root login is restricted to system console
VisokaNivo 1Ručni pregledcos
Opis
The file /etc/securetty contains a list of valid terminals that may be logged in directly as root. Since the system console has special properties to handle emergency situations, it is important to ensure that the console is in a physically secure location and that unauthorized consoles have not been defined.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
# cat /etc/securetty
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Remove entries for any consoles that are not in a physically secure location.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- container-optimized-oscoslogging
- Referenca
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 5.4 Ensure root login is restricted to system console