Detections
Analytics

1.111 SOL-11.1-040430

Information

Logins to the root account must be restricted to the system console only.

GROUP ID: V-216361
RULE ID: SV-216361r959010

Use an authorized mechanism such as RBAC and the "su" command to provide administrative access to unprivileged accounts. These mechanisms provide an audit trail in the event of problems.

Solution

The root role is required.

Modify the /etc/default/login file

# pfedit /etc/default/login

Locate the line containing:

CONSOLE

Change it to read:

CONSOLE=/dev/console

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216361r959010_rule, STIG-ID|SOL-11.1-040430, Vuln-ID|V-216361

Plugin: Unix

Control ID: 1e79f1546790963877d177f6313b826fbb7f600d3ebe0c0f22592a25a6087269