-
Notifications
You must be signed in to change notification settings - Fork 66
Open
Description
This test:
windows-baseline/controls/user_rights.rb
Lines 41 to 50 in c093ac4
control 'cis-adjust-memory-quotas-2.2.5' do | |
impact 0.7 | |
title '2.2.5 Set Adust memory quotas for a process to Administrators, LOCAL SERVICE, NETWORK SERVICE' | |
desc 'Set Adust memory quotas for a process to Administrators, LOCAL SERVICE, NETWORK SERVICE' | |
describe security_policy do | |
its('SeIncreaseQuotaPrivilege') { should include 'S-1-5-19' } | |
its('SeIncreaseQuotaPrivilege') { should include 'S-1-5-20' } | |
its('SeIncreaseQuotaPrivilege') { should include 'S-1-5-32-544' } | |
end | |
end |
..currently allows for other users to be present. This is potentially necessary, if the server is a web server or SQL server, but is not secure by default, as any user can be arbitrarily added?
Metadata
Metadata
Assignees
Labels
No labels