Cheat Sheets

Security - PAM nullok

Description

PAM should not allow nullok or nullok_secure

Tags

  • CCE-27038-9

Check Script: security-pam-no-nullok.sh

if grep -q nullok /etc/pam.d/common-auth; then
	result_failed "Found nullok in /etc/pam.d/common-auth"
else
	result_ok
fi