RHEL-09-212015 - RHEL 9 must disable the ability of systemd to spawn an interactive boot process.

Information

Using interactive or recovery boot, the console user could disable auditing, firewalls, or other services, weakening system security.

Solution

Configure RHEL 9 to allocate sufficient audit_backlog_limit to disable the ability of systemd to spawn an interactive boot process with the following command:

$ sudo grubby --update-kernel=ALL --remove-args='systemd.confirm_spawn'

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_9_V2R1_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-257788r991589_rule, STIG-ID|RHEL-09-212015, Vuln-ID|V-257788

Plugin: Unix

Control ID: cb3bbfbd90477403565221daade0214463c161229a4f0504ce7642d83dc23856