TMA-COS-6.2.4
Ensure no legacy "+" entries exist in /etc/group
OrtaDüzey 1Manuel incelemecos
Açıklama
The character + in various files used to be markers for systems to insert data from NIS maps at a certain point in a system configuration file. These entries are no longer required on most systems, but may exist in files that have been imported from other platforms. These entries may provide an avenue for attackers to gain privileged access on the system.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Run the following command and verify that no output is returned: # grep '^\+:' /etc/group
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Remove any legacy '+' entries from /etc/group if they exist.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- container-optimized-oscos
- Referans
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 6.2.4 Ensure no legacy "+" entries exist in /etc/group