← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-756

CAT II (Medium)

The system must require authentication upon booting into single-user and maintenance modes.

Rule ID

SV-44760r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000213

Discussion

If the system does not require valid root authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system.

Check Content

Check if the system requires a password for entering single-user mode.
# grep '~:S:' /etc/inittab
If /sbin/sulogin is not listed, this is a finding.

Fix Text

Edit /etc/inittab and set sulogin to run in single-user mode.
Example line in /etc/inittab:
# what to do in single-user mode
ls:S:wait:/etc/init.d/rc S
~~:S:respawn:/sbin/sulogin