Detections
Analytics
ALMA-09-013550 - AlmaLinux OS 9 must disable the ability of systemd to spawn an interactive boot process.
Information
Using interactive or recovery boot, the console user could disable auditing, firewalls, or other services, weakening system security.Solution
Configure AlmaLinux OS 9 to disable the ability of systemd to spawn an interactive boot process with the following command:$ grubby --update-kernel=ALL --remove-args="systemd.confirm_spawn"
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CL_AlmaLinux_OS_9_V1R6_STIG.zip
Item Details
Audit Name: DISA Cloud Linux AlmaLinux OS 9 STIG v1r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-269199r1050081_rule, STIG-ID|ALMA-09-013550, Vuln-ID|V-269199
Plugin: Unix
Control ID: a684296d202daba4f1628797dd3766b5ecb08ad84e5c992b6174afb43f159cc7