How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

cis-ubuntu1804-v220-4-5-6 - Skill

Name: cis-ubuntu1804-v220-4-5-6
Author: nadamohamed14796-byte

Imported from nadamohamed14796-byte/cyber-strike (.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-18-04-lts-benchmark-v2/cis-ubuntu1804-v220-4-5-6/SKILL.md). Install upstream with npx skills add nadamohamed14796-byte/cyber-strike --skill cis-ubuntu1804-v220-4-5-6. Copyright stays with the author.

CIS Ubuntu Linux 18.04 LTS Benchmark v2.2.0 - Control 4.5.6

Profile Applicability

Level 2 - Server
Level 2 - Workstation

Description

/etc/shells is a text file which contains the full pathnames of valid login shells. This file is consulted by chsh and available to be queried by other programs.

Be aware that there are programs which consult this file to find out if a user is a normal user; for example, FTP daemons traditionally disallow access to users with shells not included in this file.

Rationale

A user can use chsh to change their configured shell.

If a user has a shell configured that isn't in in /etc/shells, then the system assumes that they're somehow restricted. In the case of chsh it means that the user cannot change that value.

Other programs might query that list and apply similar restrictions.

By putting nologin in /etc/shells, any user that has nologin as its shell is considered a full, unrestricted user. This is not the expected behavior for nologin.

Audit Procedure

Command Line

Run the following command to verify that nologin is not listed in the /etc/shells file:

grep '/nologin\b' /etc/shells

Expected Result

Nothing should be returned.

Remediation

Command Line

Edit /etc/shells and remove any lines that include nologin.

References

shells(5)
NIST SP 800-53 Rev. 5: CM-1, CM-2, CM-6, CM-7, IA-5

CIS Controls

v8 - 3.3 Configure Data Access Control Lists - Configure data access control lists based on a user's need to know.

v7 - 14.6 Protect Information through Access Control Lists.

Profile Applicability

Level 2 - Server
Level 2 - Workstation

Assessment Status

Automated

Install cis-ubuntu1804-v220-4-5-6 and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "nadamohamed14796-byte-cyber-strike-cis-ubuntu1804-v220-4-5-6", "kind": "skill", "name": "cis-ubuntu1804-v220-4-5-6", "description": "Ensure nologin is not listed in /etc/shells", "publisher": "nadamohamed14796-byte", "version": "1.0.0", "capabilities": { "domains": [ "data_analysis", "math" ], "tags": [ "skill-md", "cis", "ubuntu", "linux", "ubuntu-18-04", "users", "account-security", "github" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Ensure nologin is not listed in /etc/shells" ], "primary": false, "metadata": { "source": { "provider": "github", "repository": "https://github.com/nadamohamed14796-byte/cyber-strike", "path": ".cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-18-04-lts-benchmark-v2/cis-ubuntu1804-v220-4-5-6/SKILL.md", "ref": "5df2faed343568963ef3d7cf7833bfa52e814fce", "url": "https://github.com/nadamohamed14796-byte/cyber-strike/blob/5df2faed343568963ef3d7cf7833bfa52e814fce/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-18-04-lts-benchmark-v2/cis-ubuntu1804-v220-4-5-6/SKILL.md", "key": "nadamohamed14796-byte/cyber-strike/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-18-04-lts-benchmark-v2/cis-ubuntu1804-v220-4-5-6/SKILL.md" } }, "instructions": "# CIS Ubuntu Linux 18.04 LTS Benchmark v2.2.0 - Control 4.5.6\n\n## Profile Applicability\n\n- Level 2 - Server\n- Level 2 - Workstation\n\n## Description\n\n`/etc/shells` is a text file which contains the full pathnames of valid login shells. This file is consulted by `chsh` and available to be queried by other programs.\n\nBe aware that there are programs which consult this file to find out if a user is a normal user; for example, FTP daemons traditionally disallow access to users with shells not included in this file.\n\n## Rationale\n\nA user can use `chsh` to change their configured shell.\n\nIf a user ha", "cost": { "context_tokens": 431 } }

cis-ubuntu1804-v220-4-5-6

About

CIS Ubuntu Linux 18.04 LTS Benchmark v2.2.0 - Control 4.5.6

Profile Applicability

Description

Rationale

Audit Procedure

Command Line

Expected Result

Remediation

Command Line

References

CIS Controls

Profile Applicability

Assessment Status

Install cis-ubuntu1804-v220-4-5-6 and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews