The system must prevent the root account from directly logging in except from the system console.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-226477	GEN000980	SV-226477r603265_rule		Medium

Description
Limiting the root account direct logins to only system consoles protects the root account from direct unauthorized access from a non-console device.

STIG	Date
Solaris 10 SPARC Security Technical Implementation Guide	2022-09-07

Details

Check Text ( C-28638r482816_chk )
Check the CONSOLE setting in /etc/default/login # grep CONSOLE /etc/default/login If CONSOLE is set to a value other than /dev/console, this is a finding.

Fix Text (F-28626r482817_fix)
Edit the /etc/default/login file and uncomment the line containing /dev/console if it is commented out.