TMAegisBeta
Više pravila za linux

Linux distributions

TMA-RHEL9-7.2.4

Ensure no duplicate UIDs exist

SrednjaNivo 1Automatskalinux

Opis

Although the useradd program will not let you create a duplicate User ID (UID), it is possible for an administrator to manually edit the /etc/passwd file and change the UID field.

Kako se proverava

Metod provere: Komanda ljuske

shell
alt0() { o=$(bash -c '#!/usr/bin/env bash

{
  while read -r l_count l_uid; do
    if [ "$l_count" -gt 1 ]; then
      echo -e "Duplicate UID: \"$l_uid\" Users: \"$(awk -F: '"'"'($3 == n) { print $1 }'"'"' n=$l_uid /etc/passwd | xargs)\""
    fi
  done < <(cut -f3 -d":" /etc/passwd | sort -n | uniq -c)
}' 2>&1); [ -z "$o" ] || { echo "step1: $o" | head -c 300; return 1; }; }; if alt0; then echo compliant; fi
Očekivani izlaz
compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Based on the Audit Procedure output, for each UID shared by more than one account, keep the UID on the correct account and assign a new, unused UID to each of the other accounts: # usermod -u <UID> <username> usermod reassigns ownership of files in the account's home directory automatically. Review any other files owned by the previously shared UID and reassign ownership to the correct account as appropriate.

Svojstva

Operativni sistemi
rhel-9
Oznake
cis-convertedlinux
Referenca
CIS Red Hat Enterprise Linux 9 Benchmark v3.0.0 - 7.2.4

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target linux