UCF STIG Viewer Logo

The system must require authentication upon booting into single-user and maintenance modes.


Overview

Finding ID Version Rule ID IA Controls Severity
V-756 GEN000020 SV-44760r1_rule Medium
Description
If the system does not require valid root authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system.
STIG Date
SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide 2018-09-19

Details

Check Text ( C-42265r1_chk )
Check if the system requires a password for entering single-user mode.
# grep '~:S:' /etc/inittab
If /sbin/sulogin is not listed, this is a finding.
Fix Text (F-38210r1_fix)
Edit /etc/inittab and set sulogin to run in single-user mode.
Example line in /etc/inittab:
# what to do in single-user mode
ls:S:wait:/etc/init.d/rc S
~~:S:respawn:/sbin/sulogin