Unix Security Analyzer Help
Disable Accounts Due to Inactivity
The more accounts on a computer system, the higher the risk of unauthorized activity. This is due to the potential for unauthorized activity going unnoticed and the higher likelihood of weak passwords. Unused accounts are also good candidates for brute force attacks on systems that report the last logon attempt or lock out accounts after a set number of failed logon attempts.
In addition, unused accounts often belong to terminated users. By automatically disabling accounts due to inactivity, terminated users who "slip through the cracks" of a termination process will be automatically disabled. Given that Unix accounts are often missed in manual termination checklist processes, an automated process is an excellent mitigating control.
Please click here to ask Chris for guidance on this test or the results that you received.
5-90
|
|
