Check for Remote Consoles

SrednjaNivo 1Automatskasolaris

Opis

The consadm command can be used to select or display alternate console devices. Since the system console has special properties to handle emergency situations, it is important to ensure that the console is in a physically secure location and that unauthorized consoles have not been defined. Audit: applies to the global zone.

Kako se proverava

Metod provere: Komanda ljuske

shell

command -v consadm >/dev/null 2>&1 || exit 1; out=$( { consadm -p ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Perform the following to implement the recommended state: # /usr/sbin/consadm [-d device...]

Svojstva

Operativni sistemi: Bilo koji
Oznake: solarishardening
Referenca: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 9.1 Check for Remote Consoles

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target solaris