The /etc/securetty file must be group-owned by root, sys, or bin.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-12038	GEN000000-LNX00620	SV-63013r1_rule		Medium

Description
The securetty file contains the list of terminals permitting direct root logins. It must be protected from unauthorized modification.

STIG	Date
Oracle Linux 5 Security Technical Implementation Guide	2020-02-25

Details

Check Text ( C-51809r2_chk )
Check /etc/securetty group ownership: # ls -lL /etc/securetty If /etc/securetty is not group owned by root, sys, or bin, then this is a finding.

Fix Text (F-53603r1_fix)
Change the group-owner of /etc/securetty to root, sys, or bin. Example: # chgrp root /etc/securetty