Ensure Interactive Login is Disabled

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Run sudo grep postgres /etc/shadow | cut -d: -f1-2. Unless the output is postgres:!<something> (locked password), interactive login is possible and this is a fail.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Lock the account password: passwd -l postgres (and optionally set its shell to /sbin/nologin if no one uses sudo -iu postgres). Administrators then use sudo -iu postgres.