TMA-SOLARIS-6.14
Disable "nobody" Access for RPC Encryption Key Storage Service
VisokaNivo 1Automatskasolaris
Opis
This action listed prevents keyserv from using default keys for the nobody user, effectively stopping the nobody user from accessing information via Secure RPC. If login by the user nobody is allowed for secure RPC, there is an increased risk of system compromise. Audit: compliant when keyserv is not installed.
Kako se proverava
Metod provere: Komanda ljuske
shell
f=/etc/default/keyserv; [ -f "$f" ] || { echo compliant; exit 0; }; grep -q "^ENABLE_NOBODY_KEYS=NO" "$f" && echo compliant || echo "ENABLE_NOBODY_KEYS is not NO"- Očekivani izlaz
compliant
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Perform the following to implement the recommended state: # cd /etc/default # cp keyserv keyserv.orig # awk '/ENABLE_NOBODY_KEYS=/ { $1 = "ENABLE_NOBODY_KEYS=NO" } { print }' keyserv > keyserv.CIS # mv keyserv.CIS keyserv
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- solarisnetwork
- Referenca
- CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.14 Disable "nobody" Access for RPC Encryption Key Storage Service
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target solaris