TMA-SOLARIS-6.16
Restrict root Login to System Console
VisokaNivo 1Automatskasolaris
Opis
Privileged access to the system via root must be accountable to a particular user. Use an authorized mechanism such as RBAC and the su command to provide administrative access to unprivileged accounts. These mechanisms provide an audit trail in the event of problems. Audit: pattern match on /etc/default/login as described in the CIS audit procedure.
Kako se proverava
Metod provere: Obrazac u datoteci
- Datoteka
/etc/default/login- Obrazac
(?m)^CONSOLE=/dev/console\s*$
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Perform the following to implement the recommended state: # cd /etc/default # awk '/CONSOLE=/ { print "CONSOLE=/dev/console"; next }; { print }' login > login.CIS # mv login.CIS login
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- solarisaccounts
- Referenca
- CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.16 Restrict root Login to System Console
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target solaris