1.4.3 Ensure authentication required for single user mode - emergency.service

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Requiring authentication in single user mode (rescue mode) prevents an unauthorized user from rebooting the system into single user to gain root privileges without credentials.

Solution

Edit /usr/lib/systemd/system/rescue.service and /usr/lib/systemd/system/emergency.service and set ExecStart to use ' /sbin/sulogin ': ExecStart=-/bin/sh -c '/sbin/sulogin; /usr/bin/systemctl --fail --no-block default

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-7, CSCv6|5.1

Plugin: Unix

Control ID: ea15eeac43df37245f34067c7e87e4146bf7ef144b490709cf218f57927d1c42