-
Notifications
You must be signed in to change notification settings - Fork 66
Open
Description
This test:
windows-baseline/controls/user_rights.rb
Lines 41 to 50 in c093ac4
| control 'cis-adjust-memory-quotas-2.2.5' do | |
| impact 0.7 | |
| title '2.2.5 Set Adust memory quotas for a process to Administrators, LOCAL SERVICE, NETWORK SERVICE' | |
| desc 'Set Adust memory quotas for a process to Administrators, LOCAL SERVICE, NETWORK SERVICE' | |
| describe security_policy do | |
| its('SeIncreaseQuotaPrivilege') { should include 'S-1-5-19' } | |
| its('SeIncreaseQuotaPrivilege') { should include 'S-1-5-20' } | |
| its('SeIncreaseQuotaPrivilege') { should include 'S-1-5-32-544' } | |
| end | |
| end |
..currently allows for other users to be present. This is potentially necessary, if the server is a web server or SQL server, but is not secure by default, as any user can be arbitrarily added?
Metadata
Metadata
Assignees
Labels
No labels