Detections
Analytics

1.268 RHEL-10-600450

Information

RHEL 10 must not have unauthorized accounts.

GROUP ID: V-281199
RULE ID: SV-281199r1166549

Having lockouts persist across reboots ensures that account is unlocked only by an administrator. If the lockouts did not persist across reboots, an attacker could reboot the system to continue brute force attacks against the accounts on the system.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure RHEL 10 to have no unauthorized local interactive user accounts with the following command, where <unauthorized_user> is the unauthorized account:

$ sudo userdel <unauthorized_user>

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-281199r1166549_rule, STIG-ID|RHEL-10-600450, Vuln-ID|V-281199

Plugin: Unix

Control ID: f5c2646c5f6da42399cb62a3d517e1b3b19e3cb5a5b87247ad1e8376e3d6b883