TMA-AIX-4.1.1.1

Ensure access on root user smit.log is configured

높음레벨 1자동aix

설명

The smit.log file int the HOME directory of root maintains a history of all smit commands run as root. The smit.log file may contain sensitive information regarding system configuration, which may be of interest to an attacker. This log file must be secured from unauthorized access and modifications. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.

점검 방법

감사 방식: 셸 명령

shell

command -v lsuser >/dev/null 2>&1 || exit 1; h=$(lsuser -a home root 2>/dev/null | sed -n "s/.*home=//p"); [ -n "$h" ] || exit 1; r=compliant; for f in "${h%/}/smit.log"; do if [ -e "$f" ]; then set -- $(ls -ld "$f"); s=$(printf '%s %s %s\n' "$1" "$3" "$4" | awk -v m='rw-r-----' -v o='' -v g='' '{ok=1; for(i=1;i<=9;i++) if(substr(m,i,1)=="-" && substr($1,i+1,1)!="-") ok=0; if(o!="" && $2 !~ ("^(" o ")$")) ok=0; if(g!="" && $3 !~ ("^(" g ")$")) ok=0; print (ok ? "ok" : $0)}'); [ "$s" = ok ] || r="$f: $s"; else :; fi; done; echo "$r"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Remove world read and write access to the root user's smit.log: HOME=~root if (test ${HOME} != "/") then HOME=${HOME}/ fi chmod u=rw,g=r,o-rwx ${HOME}smit.log chown root:system ${HOME}smit.log

속성

운영 체제: 모두
태그: aixaudit
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 4.1.1.1 Ensure access on root user smit.log is configured

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aix