1.4.3 Ensure authentication required for single user mode - rescue.service
Information
Requiring authentication in single user mode prevents an unauthorized user from rebooting the system into single user to gain root privileges without credentials.
Solution
Edit /etc/sysconfig/init and set SINGLE to '/sbin/sulogin': SINGLE=/sbin/sulogin