The system must require authentication upon booting into single-user and maintenance modes.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-756	GEN000020	SV-35273r1_rule	IAIA-1 IAIA-2	Medium

Description
If the system does not require valid root authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system.

STIG	Date
HP-UX 11.23 Security Technical Implementation Guide	2012-05-25

Details

Check Text ( C-35104r1_chk )
Check if the system is configured to require a password before entering single-user mode via the following: # getprpw -m

Fix Text (F-30373r1_fix)
Configure the system to require a password before entering single-user mode via the following: # modprpw -m bootpw="YES"