TMAegis
Više pravila za freebsd

TMA-FREEBSD-6.2.2

Ensure /etc/master.passwd password fields are not empty

KritičnaNivo 1Automatskafreebsd

Opis

An account with an empty password field means that anybody may log in as that user without providing a password. All accounts must have passwords or be locked to prevent the account from being used by an unauthorized user. Audit: no account in /etc/master.passwd may have an empty password field.

Kako se proverava

Metod provere: Komanda ljuske

shell
command -v awk >/dev/null 2>&1 || exit 1; [ -r /etc/master.passwd ] || exit 1; out=$( { awk -F: '($2 == "") { print $1 " does not have a password" }' /etc/master.passwd ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20
Očekivani izlaz
compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

If any accounts in the /etc/master.passwd file do not have a password, run the following command to lock the account until it can be determined why it does not have a password: # pw lock <username> Also, check to see if the account is logged in and investigate what it is being used for to determine if it needs to be forced off.

Svojstva

Operativni sistemi
Bilo koji
Oznake
freebsdpassword-policy
Referenca
CIS FreeBSD 14 Benchmark v1.0.1 - 6.2.2 Ensure /etc/master.passwd password fields are not empty

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target freebsd