Detections
Analytics

9.4 Restrict root Login to System Console - Review

Information

The file /etc/securetty contains a list of valid terminals that may be logged in directly as
root.

*Rationale*

Since the system console has special properties to handle emergency situations, it is
important to ensure that the console is in a physically secure location and that
unauthorized consoles have not been defined.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Remove entries for any consoles that are not in a physically secure location.

See Also

https://workbench.cisecurity.org/files/91

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(3)

Plugin: Unix

Control ID: 8d4c0bfee8a0a28f7731d52cc00cdbbc8c4600de8f5cbee1c77d2e18f019c1d3