Ensure access to /etc/shadow is configured

SrednjaNivo 1Automatskalinux

Opis

The /etc/shadow file is used to store the information about user accounts that is critical to the security of those accounts, such as the hashed password and other security information.

Kako se proverava

Metod provere: Komanda ljuske

shell

alt0() { command -v stat >/dev/null 2>&1 || { echo "step1: stat not installed"; return 1; }; o=$(bash -c 'stat -Lc '"'"'Access: (%#a/%A)  Uid: ( %u/ %U) Gid: ( %g/ %G)'"'"'  /etc/shadow' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'Access: (0/----------) Uid: ( 0/ root) Gid: ( 0/ root)' || { echo step1: missing 'Access: (0/----------) Uid: ( 0/ root) Gid: ( 0/ root)'; return 1; }; }; if alt0; then echo compliant; fi

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Run the following commands to set mode, owner, and group on /etc/shadow: # chown root:root /etc/shadow # chmod 0000 /etc/shadow

Svojstva

Operativni sistemi: rhel-10
Oznake: cis-convertedlinux
Referenca: CIS Red Hat Enterprise Linux 10 Benchmark v1.0.1 - 7.1.5

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target linux