Ensure access to /etc/gshadow is configured

SrednjaNivo 1Automatskalinux

Opis

The /etc/gshadow file is used to store the information about groups that is critical to the security of those accounts, such as the hashed password and other security information.

Kako se proverava

Metod provere: Komanda ljuske

shell

alt0() { command -v stat >/dev/null 2>&1 || { echo "step1: stat not installed"; return 1; }; o=$(bash -c 'stat -Lc '"'"'Access: (%#a/%A)  Uid: ( %u/ %U) Gid: ( %g/ %G)'"'"'  /etc/gshadow' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'Access: (0/----------) Uid: ( 0/ root) Gid: ( 0/ root)' || { echo step1: missing 'Access: (0/----------) Uid: ( 0/ root) Gid: ( 0/ root)'; return 1; }; }; if alt0; then echo compliant; fi

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Run the following commands to set mode, owner, and group on /etc/gshadow: # chown root:root /etc/gshadow # chmod 0000 /etc/gshadow

Svojstva

Operativni sistemi: rocky-8
Oznake: cis-convertedlinux
Referenca: CIS Rocky Linux 8 Benchmark v3.0.0 - 7.1.7

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target linux