TMA-COS-6.2.3
Ensure no legacy "+" entries exist in /etc/shadow
SrednjaNivo 1Ručni pregledcos
Opis
The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on most systems, but may exist in files that have been imported from other platforms. These entries may provide an avenue for attackers to gain privileged access on the system.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Run the following command and verify that no output is returned: # grep '^\+:' /etc/shadow
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Remove any legacy '+' entries from /etc/shadow if they exist.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- container-optimized-oscos
- Referenca
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 6.2.3 Ensure no legacy "+" entries exist in /etc/shadow