Detections
Analytics

1.33 ALMA-09-006290

Information

AlmaLinux OS 9 must require a boot loader password.

GROUP ID: V-269137
RULE ID: SV-269137r1137691

Password protection on the boot loader configuration ensures users with physical access cannot trivially alter important bootloader settings. These include which kernel to use, and whether to enter single-user mode.

Solution

Configure AlmaLinux OS 9 to require a grub bootloader password for the grub superuser account.

Generate an encrypted grub2 password for the grub superuser account with the following command:

$ grub2-setpassword

Enter password:
Confirm password:

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CCI|CCI-000213, Rule-ID|SV-269137r1137691_rule, STIG-ID|ALMA-09-006290, Vuln-ID|V-269137

Plugin: Unix

Control ID: 1e934c470529e9c5fa47835b79ac76b0ac107bc6c01d706ebb972e8bf10fc3bb