Detections
Analytics

1.330 OL09-00-002501

Information

OL 9 must not have unauthorized accounts.

GROUP ID: V-271770
RULE ID: SV-271770r1092022

Accounts providing no operational purpose provide additional opportunities for system compromise. Unnecessary accounts include user accounts for individuals not requiring access to the system and application accounts for applications not installed on the system.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Remove unauthorized local interactive user accounts with the following command where <unauthorized_user> is the unauthorized account:

$ sudo userdel <unauthorized_user>

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271770r1092022_rule, STIG-ID|OL09-00-002501, Vuln-ID|V-271770

Plugin: Unix

Control ID: 428cbf480ef5befd99642cc87d6cb80a9416b1bdbc07caaa5c3826be7b2e3d8d