UCF STIG Viewer Logo

The system must prevent the root account from logging in from serial consoles.


Finding ID Version Rule ID IA Controls Severity
V-217866 RHEL-06-000028 SV-217866r505923_rule Low
Preventing direct root login to serial port interfaces helps ensure accountability for actions taken on the systems using the root account.
Red Hat Enterprise Linux 6 Security Technical Implementation Guide 2020-09-03


Check Text ( C-19347r376613_chk )
To check for serial port entries which permit root login, run the following command:

# grep '^ttyS[0-9]' /etc/securetty

If any output is returned, then root login over serial ports is permitted.
If root login over serial ports is permitted, this is a finding.
Fix Text (F-19345r376614_fix)
To restrict root logins on serial ports, ensure lines of this form do not appear in "/etc/securetty":


Note: Serial port entries are not limited to those listed above. Any lines starting with "ttyS" followed by numerals should be removed