cyberstrikeus CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0 - Control 6.2.11
Profile
- Level: 1 - Server
- Level: 1 - Workstation
- Assessment Status: Automated
Description
Any account with UID 0 has superuser privileges on the system.
Rationale
This access must be limited to only the default root account and only from the system console. Administrative access must be through an unprivileged account using an approved mechanism as noted in Item 5.6 Ensure access to the su command is restricted.
Audit Procedure
Command Line
Run the following command and verify that only "root" is returned:
awk -F: '($3 == 0) { print $1 }' /etc/passwd
Expected Result
Only root should be returned.
Remediation
Command Line
Remove any users other than root with UID 0 or assign them a new UID if appropriate.
Default Value
N/A
References
N/A
CIS Controls
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v7 | 4.6 Use of Dedicated Machines For All Administrative TasksEnsure administrators use a dedicated machine for all administrative tasks or tasks requiring administrative access. This machine will be segmented from the organization's primary network and not be allowed Internet access. This machine will not be used for reading e-mail, composing documents, or browsing the Internet. |