UCF STIG Viewer Logo

The system must not permit interactive boot.


Overview

Finding ID Version Rule ID IA Controls Severity
V-208845 OL6-00-000070 SV-208845r793630_rule Medium
Description
Using interactive boot, the console user could disable auditing, firewalls, or other services, weakening system security.
STIG Date
Oracle Linux 6 Security Technical Implementation Guide 2021-12-03

Details

Check Text ( C-9098r357515_chk )
To check whether interactive boot is disabled, run the following command:

$ grep PROMPT /etc/sysconfig/init

If interactive boot is disabled, the output will show:

PROMPT=no

If it does not, this is a finding.
Fix Text (F-9098r357516_fix)
To disable the ability for users to perform interactive startups, edit the file "/etc/sysconfig/init". Add or correct the line:

PROMPT=no

The "PROMPT" option allows the console user to perform an interactive system startup, in which it is possible to select the set of services which are started on boot.