TMAegis
Više pravila za ros

TMA-ROS1-6.2.1

Ensure password fields are not empty

VisokaNivo 1Automatskaros

Opis

An account with an empty password field means that anybody may log in as that user without providing a password. The audit requires every account in /etc/shadow to have a non-empty password field. Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.

Kako se proverava

Metod provere: Komanda ljuske

shell
[ -r /etc/shadow ] || exit 1
u=$(awk -F: '($2 == "") {print $1}' /etc/shadow)
[ -z "$u" ] && echo compliant || echo "accounts without password: $(printf '%s ' $u)"
Očekivani izlaz
compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

If any accounts in the /etc/shadow file do not have a password, run the following command to lock the account until it can be determined why it does not have a password: # passwd -l <username> Also, check to see if the account is logged in and investigate what it is being used for to determine if it needs to be forced off.

Svojstva

Operativni sistemi
Bilo koji
Oznake
rosros1melodicmaintenance
Referenca
CIS ROS Melodic Benchmark v1.0.0 - 6.2.1 Ensure password fields are not empty

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target ros