Detections
Analytics

1.34 ALMA-09-006400

Information

AlmaLinux OS 9 must require a unique superuser's name upon booting into single-user and maintenance modes.

GROUP ID: V-269138
RULE ID: SV-269138r1137691

Having a nondefault grub superuser username makes password-guessing attacks less effective.

Solution

Configure AlmaLinux OS 9 to have a unique username for the grub superuser account using the following commands:

$ sed -ri 's/root/superman/' /etc/grub.d/01_users

$ grub2-mkconfig -o /boot/grub2/grub.cfg

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CCI|CCI-000213, Rule-ID|SV-269138r1137691_rule, STIG-ID|ALMA-09-006400, Vuln-ID|V-269138

Plugin: Unix

Control ID: 03f299277122da04685b3ce69c94bc5ecb0bba4a358609eae576cd4067172eaf