RHEL-09-212020 - RHEL 9 must require a unique superusers name upon booting into single-user and maintenance modes.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


Having a nondefault grub superuser username makes password-guessing attacks less effective.


Configure RHEL 9 to have a unique username for the grub superuser account.

Edit the '/etc/grub.d/01_users' file and add or modify the following lines in the '### BEGIN /etc/grub.d/01_users ###' section:

set superusers='superusers-account'
export superusers

Once the superuser account has been added, update the grub.cfg file by running:

$ sudo grubby --update-kernel=ALL'

See Also


Item Details

References: CAT|I, CCI|CCI-000213, Rule-ID|SV-257789r925354_rule, STIG-ID|RHEL-09-212020, Vuln-ID|V-257789

Plugin: Unix

Control ID: dc62776cc55d1622df39400c3517c1ebc703fce00c85ddcb8db8e368ab714baa