Ensure interactive boot is not enabled

MediumLevel 1Manual reviewros

Description

Interactive boot allows console users to interactively select which services start on boot. Not all distributions support this capability. The PROMPT_FOR_CONFIRM option provides console users the ability to interactively boot the system and select which services to start on boot . Manual review against site policy. Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

If interactive boot is available verify it is disabled on your system. On some distributions this is configured via the PROMPT_FOR_CONFIRM option in /etc/sysconfig/boot : # grep "^PROMPT_FOR_CONFIRM=" /etc/sysconfig/boot PROMPT_FOR_CONFIRM="no"

How it is fixed

Fix method: Guidance or infrastructure patch

If interactive boot is available disable it.

Properties

Operating systems: Any
Tags: rosros1melodicsystem
Reference: CIS ROS Melodic Benchmark v1.0.0 - 1.5.4 Ensure interactive boot is not enabled