OCI: Should a User Login Shell Be Disabled?
in Linux
Applies to
Oracle Cloud Infrastructure - Version N/A and later
Linux x86-64
Goal
A 3rd party security tool reports that login shell should be disabled for some users in a OCI instance or a user want to . The users have shell login enabled with /bin/bash:
grid
oracle
oracle-client
opc
csctic
mqm
Actual users may vary across different distributions and different releases)
Can the shell login be disabled for these users?
Solution
Linux users present at the time of the instance creation should not be removed or modified in principle – this is the case for the opc user for Compute instances.
Tagged:
0