TMA-SOLARIS-2.7
Disable Kerberos TGT Expiration Warning
NiskaNivo 1Automatskasolaris
Opis
The Kerberos TGT warning service is used to warn users when their Kerberos tickets are about to expire or to renew those tickets before they expire. This service is not used if Kerberos has not been configured. This service is configured to be "local only" by default. This service should be disabled if it is not required. Audit: `svcs -Ho state` must report disabled or uninitialized; a service that is not installed is compliant.
Kako se proverava
Metod provere: Komanda ljuske
shell
command -v svcs >/dev/null 2>&1 || exit 1; r=compliant; for f in svc:/network/security/ktkt_warn; do st=$(svcs -Ho state "$f" 2>/dev/null); case "$st" in ''|disabled|uninitialized) ;; *) r="$f: $st";; esac; done; echo "$r"- Očekivani izlaz
compliant
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
svcadm disable svc:/network/security/ktkt_warn
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- solarishardening
- Referenca
- CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 2.7 Disable Kerberos TGT Expiration Warning
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target solaris