UCF STIG Viewer Logo

The system must prevent the root account from directly logging in except from the system console.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227603 GEN000980 SV-227603r603266_rule Medium
Description
Limiting the root account direct logins to only system consoles protects the root account from direct unauthorized access from a non-console device.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2020-12-04

Details

Check Text ( C-29765r488366_chk )
Check the CONSOLE setting in /etc/default/login
# grep CONSOLE /etc/default/login
If CONSOLE is set to a value other than /dev/console, this is a finding.
Fix Text (F-29753r488367_fix)
Edit the /etc/default/login file and uncomment the line containing /dev/console if it is commented out.