Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

The system must prevent the root account from logging in from serial consoles.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

The system must prevent the root account from logging in from serial consoles.

Description

Discussion Text

Preventing direct root login to serial port interfaces helps ensure accountability for actions taken on the systems using the root account.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-208805

Rule

SV-208805r793590_rule

Severity

low

Rule Version

OL6-00-000028

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

To check for serial port entries which permit root login, run the following command: 

# grep '^ttyS[0-9]' /etc/securetty

If any output is returned, then root login over serial ports is permitted. 
If root login over serial ports is permitted, this is a finding.

Implementation Procedure

Fix Text

To restrict root logins on serial ports, ensure lines of this form do not appear in "/etc/securetty": 

ttyS0
ttyS1

Note:  Serial port entries are not limited to those listed above.  Any lines starting with "ttyS" followed by numerals should be removed.

STIG check 13 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-208804The system must prevent the root account from logging in from virtual consoles.Next · V-208806 →Default operating system accounts, other than root, must be locked.