Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

The system must require authentication upon booting into single-user and maintenance modes.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

The system must require authentication upon booting into single-user and maintenance modes.

Description

Discussion Text

This prevents attackers with physical access from trivially bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-208844

Rule

SV-208844r793629_rule

Severity

medium

Rule Version

OL6-00-000069

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

To check if authentication is required for single-user mode, run the following command: 

$ grep SINGLE /etc/sysconfig/init

The output should be the following: 

SINGLE=/sbin/sulogin

If the output is different, this is a finding.

Implementation Procedure

Fix Text

Single-user mode is intended as a system recovery method, providing a single user root access to the system by providing a boot option at startup. By default, no authentication is performed if single-user mode is selected. 

To require entry of the root password even if the system is started in single-user mode, add or correct the following line in the file "/etc/sysconfig/init": 

SINGLE=/sbin/sulogin

STIG check 52 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-208843The system boot loader must require authentication.Next · V-208845 →The system must not permit interactive boot.