Disable login: Services on Serial Ports

SrednjaNivo 1Automatskasolaris

Opis

The svccfg command provides service administration for the lower level of the Service Access Facility hierarchy and can be used to disable the ability to login on a particular port. Login services should not be enabled on any serial ports that are not strictly required to support the mission of the system. This action can be safely performed even when console access is provided using a serial port. Audit: `svcs -Ho state` must report disabled; a service that is not installed is compliant.

Kako se proverava

Metod provere: Komanda ljuske

shell

command -v svcs >/dev/null 2>&1 || exit 1; r=compliant; for f in svc:/system/console-login:terma svc:/system/console-login:termb; do st=$(svcs -Ho state "$f" 2>/dev/null); case "$st" in ''|disabled) ;; *) r="$f: $st";; esac; done; echo "$r"

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

svcadm disable svc:/system/console-login:terma svc:/system/console-login:termb

Svojstva

Operativni sistemi: Bilo koji
Oznake: solarisaccounts
Referenca: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.1 Disable login: Services on Serial Ports

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target solaris