GEN002640 - Default system accounts must be disabled or removed - 'bin'

Information

Vendor accounts and software may contain backdoors allowing unauthorized access to the system. These backdoors are common knowledge and present a threat to system security if the account is not disabled.

Solution

Lock the default system account(s).
# passwd -l <user>

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5e., CAT|II, CCI|CCI-000178, Group-ID|V-810, Rule-ID|SV-37903r1_rule, STIG-ID|GEN002640, Vuln-ID|V-810

Plugin: Unix

Control ID: 3afac7e1b5e494597329e5f69f80b451542779506d02f4a5b1ebe434e2d31b68