TMAegisBeta
Više pravila za linux

Linux distributions

TMA-RHEL9-5.2.8

Ensure sudo pwfeedback is configured

SrednjaNivo 1Automatskalinux

Opis

The pwfeedback option provides visual feedback (for example, an asterisk) for each character as the sudo password is typed. When not enabled (the default), no feedback is displayed.

Kako se proverava

Metod provere: Komanda ljuske

shell
alt0() { command -v grep >/dev/null 2>&1 || { echo "step1: grep not installed"; return 1; }; o=$(bash -c 'grep -rPi -- '"'"'^\h*Defaults\h+([^#]+,\h*)?pwfeedback\b'"'"' /etc/sudoers /etc/sudoers.d/' 2>/dev/null); [ -z "$o" ] || { echo "step1: $o" | head -c 300; return 1; }; }; if alt0; then echo compliant; fi
Očekivani izlaz
compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Ensure sudo does not display feedback while the password is typed. Edit the appropriate sudoers file with visudo and remove any line that enables pwfeedback, or explicitly disable it: # visudo Add or correct the line: Defaults !pwfeedback

Svojstva

Operativni sistemi
rhel-9
Oznake
cis-convertedlinux
Referenca
CIS Red Hat Enterprise Linux 9 Benchmark v3.0.0 - 5.2.8

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target linux