28 lines
571 B
YAML
28 lines
571 B
YAML
---
|
|
|
|
{{ if .Vars.ubtu24cis_level_1 }}
|
|
{{ if .Vars.ubtu24cis_rule_5_4_2_2 }}
|
|
command:
|
|
root_only_gid_0:
|
|
title: 5.4.2.2 | Ensure root is the only GID 0 account
|
|
exec: "awk -F: '($1 !~ /^(sync|shutdown|halt|operator)/ && $4=='0') {print $1\":\"$4}' /etc/passwd"
|
|
exit-status: 0
|
|
stdout: ['root:0']
|
|
meta:
|
|
server: 1
|
|
workstation: 1
|
|
CIS_ID:
|
|
- 5.4.2.2
|
|
CISv8: NA
|
|
CISv8_IG1: NA
|
|
CISv8_IG2: NA
|
|
CISv8_IG3: NA
|
|
NIST800-53R5:
|
|
- CM-1
|
|
- CM-2
|
|
- CM-6
|
|
- CM-7
|
|
- IA-5
|
|
{{ end }}
|
|
{{ end }}
|