Azure Container Linux
TMA-AZURE-CONTAINER-LINUX-7.2.4
Ensure no duplicate UIDs exist
OrtaDüzey 1Otomatikazure-container-linux
Açıklama
Although the useradd program will not let you create a duplicate User ID (UID), it is possible for an administrator to manually edit the /etc/passwd file and change the UID field. Audit: Passes when no value of field 3 in /etc/passwd appears more than once.
Nasıl denetlenir
Denetim yöntemi: Kabuk komutu
shell
cut -d: -f3 /etc/passwd | sort | uniq -d | grep -q . && echo noncompliant || echo compliant- Beklenen çıktı
compliant
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Based on the results of the audit script, establish unique UIDs and review all files owned by the shared UIDs to determine which UID they are supposed to belong to.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- azure-container-linuxaccounts
- Referans
- CIS Azure Container Linux Benchmark v1.0.0 - 7.2.4 Ensure no duplicate UIDs exist
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
shell
tmaegis scan --target azure-container-linux