The SUSE operating system must not have unnecessary account capabilities.
An XCCDF Rule
Description
Accounts providing no operational purpose provide additional opportunities for system compromise. Therefore all necessary non interactive accounts should not have an interactive shell assigned to them.
- ID
- SV-234875r991589_rule
- Version
- SLES-15-020091
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the SUSE operating system so that all non-interactive accounts on the system have no interactive shell assigned to them.
Run the following command to disable the interactive shell for a specific non-interactive user account:
> sudo usermod --shell /sbin/nologin nobody