Detections
Analytics

1.135 ALMA-09-017950

Information

AlmaLinux OS 9 must not have unauthorized accounts.

GROUP ID: V-269238
RULE ID: SV-269238r1050120

Accounts providing no operational purpose provide additional opportunities for system compromise. Unnecessary accounts include user accounts for individuals not requiring access to the system and application accounts for applications not installed on the system.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Remove unauthorized local interactive user accounts with the following command where <unauthorized_user> is the unauthorized account:

$ userdel -rf <unauthorized_user>

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269238r1050120_rule, STIG-ID|ALMA-09-017950, Vuln-ID|V-269238

Plugin: Unix

Control ID: 363558ca4437b93bafe53e3d97aab9d3d117a0e0838f2beaa724f3cbd9009ded