TMA-COS-5.4
Ensure root login is restricted to system console
TinggiLevel 1Tinjauan manualcos
Deskripsi
The file /etc/securetty contains a list of valid terminals that may be logged in directly as root. Since the system console has special properties to handle emergency situations, it is important to ensure that the console is in a physically secure location and that unauthorized consoles have not been defined.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
# cat /etc/securetty
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Remove entries for any consoles that are not in a physically secure location.
Properti
- Sistem operasi
- Apa saja
- Tag
- container-optimized-oscoslogging
- Referensi
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 5.4 Ensure root login is restricted to system console