Detections
Analytics

1.109 SOL-11.1-040430

Information

Logins to the root account must be restricted to the system console only.

GROUP ID: V-216124RULE ID: SV-216124r959010

Use an authorized mechanism such as RBAC and the "su" command to provide administrative access to unprivileged accounts. These mechanisms provide an audit trail in the event of problems.

Solution

The root role is required.

Modify the /etc/default/login file

pfedit /etc/default/login

Locate the line containing:

CONSOLE

Change it to read:

CONSOLE=/dev/console

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216124r959010_rule, STIG-ID|SOL-11.1-040430, Vuln-ID|V-216124

Plugin: Unix

Control ID: 52e839b5476d830b301e1d6c54f976e9ef2c3451d7c096f7b32c8391dc58a653