TMA-SOLARIS-6.16

Restrict root Login to System Console

高级别 1自动化solaris

说明

Privileged access to the system via root must be accountable to a particular user. Use an authorized mechanism such as RBAC and the su command to provide administrative access to unprivileged accounts. These mechanisms provide an audit trail in the event of problems. Audit: pattern match on /etc/default/login as described in the CIS audit procedure.

检查方式

审计方法: 文件正则匹配

文件: /etc/default/login
匹配模式: (?m)^CONSOLE=/dev/console\s*$

修复方式

修复方法: 操作指南或基础设施补丁

Perform the following to implement the recommended state: # cd /etc/default # awk '/CONSOLE=/ { print "CONSOLE=/dev/console"; next }; { print }' login > login.CIS # mv login.CIS login

属性

操作系统: 任意
标签: solarisaccounts
参考: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 6.16 Restrict root Login to System Console

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target solaris