Ensure the admin user shell is clish

中等級 1自動化checkpoint

說明

Giving admin the Expert bash shell by default bypasses clish role controls. PASS requires 'set user admin shell /etc/cli.sh'. Audited against the Gaia clish 'show configuration' output.

檢查方式

稽核方法: 設定正規表示式

比對模式: (?m)^set user admin shell /etc/cli\.sh[ \t]*$

修補方式

修補方法: 操作指南或基礎設施修補檔

set user admin shell /etc/cli.sh save config WebUI: User Management > Users > admin > Shell = /etc/cli.sh.

屬性

作業系統: 不限
標籤: checkpointauthenticationmanagement
參考資料: CIS Check Point Firewall Benchmark - User Management - Admin shell (verify section number for your Gaia release)

檢查此主機

請在您有權稽核的機器上執行此指令。掃描為唯讀操作。

shell

tmaegis scan --target checkpoint