Detections
Analytics

1.32 ALMA-09-006180

Information

AlmaLinux OS 9 must require authentication to access emergency mode.

GROUP ID: V-269136
RULE ID: SV-269136r1137691

This requirement prevents attackers with physical access from easily bypassing security on the machine and gaining root access.

Such accesses are further prevented by configuring the bootloader password.

Solution

Configure AlmaLinux OS 9 to require authentication for emergency mode.

Add or modify the following line in the "/usr/lib/systemd/system/emergency.service" file:

ExecStart=-/usr/lib/systemd/systemd-sulogin-shell emergency

"sudo systemctl edit emergency.service" can also be used to create a "/etc/systemd/system/emergency.service.d/override.conf" file.

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CCI|CCI-000213, Rule-ID|SV-269136r1137691_rule, STIG-ID|ALMA-09-006180, Vuln-ID|V-269136

Plugin: Unix

Control ID: 1dec81b4b3add021cfe57f44faafffc46a9a07bc35e4df80bfa4bd64d06b0395