Ensure access to /etc/gshadow- is configured

SrednjaNivo 1Automatskalinux

Opis

The /etc/gshadow- file is used to store backup information about groups that is critical to the security of those accounts, such as the hashed password and other security information.

Kako se proverava

Metod provere: Komanda ljuske

shell

alt0() { command -v stat >/dev/null 2>&1 || { echo "step1: stat not installed"; return 1; }; o=$(bash -c 'stat -Lc '"'"'Access: (%#a/%A)  Uid: ( %u/ %U) Gid: ( %g/ %G)'"'"'  /etc/gshadow-' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'Access: (0/----------) Uid: ( 0/ root) Gid: ( 0/ root)' || { echo step1: missing 'Access: (0/----------) Uid: ( 0/ root) Gid: ( 0/ root)'; return 1; }; }; if alt0; then echo compliant; fi

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Run the following commands to set mode, owner, and group on /etc/gshadow-: # chown root:root /etc/gshadow- # chmod 0000 /etc/gshadow-

Svojstva

Operativni sistemi: rhel-10
Oznake: cis-convertedlinux
Referenca: CIS Red Hat Enterprise Linux 10 Benchmark v1.0.1 - 7.1.8

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target linux