GEN000000-LNX00640 - The /etc/securetty file must be owned by root.

Information

The securetty file contains the list of terminals permitting direct root logins. It must be protected from unauthorized modification.

Solution

Change the owner of the /etc/securetty file to root.

Procedure:
# chown root /etc/securetty

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Audit Name: DISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-6, 800-53|CM-6b., CAT|II, CCI|CCI-000225, CCI|CCI-000366, Group-ID|V-12039, Rule-ID|SV-37341r1_rule, STIG-ID|GEN000000-LNX00640, Vuln-ID|V-12039

Plugin: Unix

Control ID: 07cc95cc4d151a865ed0bfedce1b8eb74d9034909aa4fb98493f92e0934af221