Details

The /etc/default/sys-suspend settings control which users are allowed to use the syssuspend command to shut down the system.

Solution

Perform the following to implement the recommended state:
# cd /etc/default
# awk ‘/^PERMS=/ { $1 = “PERMS=-” }
{ print }’ sys-suspend >sys-suspend.new
# mv sys-suspend.new sys-suspend
# pkgchk -f -n -p /etc/default/sys-suspend

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/614

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-6(1)

Source

• Tenable.com/audits