Rotate your device back to portrait to use STIG Vault.
The Red Hat Enterprise Linux 10 Security Technical Implementation Guide (V1 R3) has 435 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
Verify RHEL 10 requires a unique superusers name upon booting into single-user and maintenance modes.
Verify that the boot loader superuser account has been set with the following command:
$ sudo grep -A1 "superusers" /etc/grub2.cfg
set superusers="<accountname>"
export superusers
password_pbkdf2 <accountname> ${GRUB2_PASSWORD}
Verify <accountname> is not a common name such as root, admin, or administrator.
If superusers contains easily guessable usernames, this is a finding.
Configure RHEL 10 to have a unique username for the grub superuser account.
Edit the "/etc/grub.d/01_users" file and add or modify the following lines with a nondefault username for the superuser account:
set superusers="<accountname>"
export superusers
Once the superuser account has been added, update the "grub.cfg" file by regenerating the GRUB configuration with the following command:
$ sudo grub2-mkconfig -o /boot/grub2/grub.cfg --update-bls-cmdline
Reboot the system:
$ sudo reboot