AIX7-00-001011 - Direct logins to the AIX system must not be permitted to shared accounts, default accounts, application accounts, and utility accounts.

Information

Shared accounts (accounts where two or more people log in with the same user identification) do not provide identification and authentication. There is no way to provide for non-repudiation or individual accountability.

Solution

Direct login to shared or application accounts can be prevented by setting the "rlogin=false" in the accounts stanza of the "/etc/security/user" file.

From the command prompt, run the following command to set "rlogin=false" for a shared account:

# chuser rlogin=false [shared_account]

Item Details

Audit Name: DISA IBM AIX 7.x STIG v3r2

Category: IDENTIFICATION AND AUTHENTICATION

Plugin: Unix

Control ID: 42a159ec73c2fab94178e65fdb01d1ac8f33ede28a12e80462c056644e10a8a2

Detections

Analytics

AIX7-00-001011 - Direct logins to the AIX system must not be permitted to shared accounts, default accounts, application accounts, and utility accounts.

Information

Solution

See Also

Item Details