IBM AIX
TMA-AIX-4.8.6
Ensure motd is configured
Mô tả
Create a /etc/motd file which displays, post initial logon, a statutory warning message. The creation of a /etc/motd file which contains a statutory warning message could aid in the prosecution of offenders guilty of unauthorized system access. Audit: compares `ls -ld` mode (this mode or more restrictive), owner and group with the CIS values; ACLs are not evaluated.
Cách kiểm tra
Phương pháp kiểm tra: Lệnh shell
r=compliant; for f in /etc/motd; do if [ -e "$f" ]; then set -- $(ls -ld "$f"); s=$(printf '%s %s %s\n' "$1" "$3" "$4" | awk -v m='rw-r--r--' -v o='' -v g='' '{ok=1; for(i=1;i<=9;i++) if(substr(m,i,1)=="-" && substr($1,i+1,1)!="-") ok=0; if(o!="" && $2 !~ ("^(" o ")$")) ok=0; if(g!="" && $3 !~ ("^(" g ")$")) ok=0; print (ok ? "ok" : $0)}'); [ "$s" = ok ] || r="$f: $s"; else r="$f: missing"; fi; done; echo "$r"- Đầu ra mong đợi
compliant
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Create a /etc/motd file: touch /etc/motd chmod u=rw,go=r /etc/motd chown bin:bin /etc/motd Below is a sample banner: *************************************************************************** ` NOTICE TO USERS This computer system is the private property of its owner, whether individual, corporate or government. It is for authorized use only. Users (authorized or unauthorized) have no explicit or implicit expectation of privacy. Any or all uses of this system and all files on this system may be intercepted, monitored, recorded, copied, audited, inspected, and disclosed to your employer, to authorized site, government, and law enforcement personnel, as well as authorized officials of government agencies, both domestic and foreign. By using this system, the user consents to such interception, monitoring,recording, copying, auditing, inspection, and disclosure at the discretion of such personnel or officials. Unauthorized or improper use of this system may result in civil and criminal penalties and administrative or disciplinary action, as appropriate. By continuing to use this system you indicate your awareness of and consent to these terms and ... (see CIS section 4.8.6)
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- aixhardening
- Tham chiếu
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.8.6 Ensure motd is configured
Kiểm tra máy này
Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.
tmaegis scan --target aix