Cheat Sheets

Security - PAM nullok

Description

PAM should not allow nullok or nullok_secure

Tags

  • CCE-27038-9

Check Script: security-pam-no-nullok.sh

#!/bin/bash

if grep -q nullok /etc/pam.d/common-auth; then result_failed "Found nullok in /etc/pam.d/common-auth" else result_ok fi