1.4.2 Ensure authentication required for single user mode

Information

Requiring authentication in single user mode prevents an unauthorized user from rebooting the system into single user to gain root privileges without credentials.

Solution

Edit /etc/sysconfig/init and set SINGLE to '/sbin/sulogin'-SINGLE=/sbin/sulogin

See Also

https://workbench.cisecurity.org/files/1863

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-7(9), CSCv6|5.1

Plugin: Unix

Control ID: 67b017a8b10d19c50d212692dc75ce318bc8937eab066e35bab1d0e7f01e3fc9