openstack/ansible-hardening
Code Issues Proposed changes
Files
0e8feaf9eb5265dcef8682d596e62063f7120a92
ansible-hardening/doc/metadata/rhel7/RHEL-07-020310.rst
Major Hayden 300c9f8c1b Check for other UID 0 accounts 
This patch checks for accounts with UID 0 that aren't root.

Implements: blueprint security-rhel7-stig
Change-Id: I983b4ba3fcd311af72bc7165bd90862cb77de1f8
2016-11-14 20:12:35 -06:00

369 B
Raw Blame History

---id: RHEL-07-020310 status: implemented tag: auth ---

If an account with UID 0 other than root exists on the system, the playbook will fail with an error message that includes the other accounts which have a UID of 0.

Deployers are strongly urged to keep only one account with UID 0, root, and to use sudo any situations where root access is required.