UCF STIG Viewer Logo

The system must prevent the root account from logging in from serial consoles.


Overview

Finding ID Version Rule ID IA Controls Severity
V-208805 OL6-00-000028 SV-208805r793590_rule Low
Description
Preventing direct root login to serial port interfaces helps ensure accountability for actions taken on the systems using the root account.
STIG Date
Oracle Linux 6 Security Technical Implementation Guide 2021-12-03

Details

Check Text ( C-9058r357395_chk )
To check for serial port entries which permit root login, run the following command:

# grep '^ttyS[0-9]' /etc/securetty

If any output is returned, then root login over serial ports is permitted.
If root login over serial ports is permitted, this is a finding.
Fix Text (F-9058r357396_fix)
To restrict root logins on serial ports, ensure lines of this form do not appear in "/etc/securetty":

ttyS0
ttyS1

Note: Serial port entries are not limited to those listed above. Any lines starting with "ttyS" followed by numerals should be removed.