Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-756 | GEN000020 | SV-36754r1_rule | IAIA-1 IAIA-2 | Medium |
Description |
---|
If the system does not require valid root authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system. |
STIG | Date |
---|---|
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2015-03-25 |
Check Text ( C-35837r1_chk ) |
---|
This can be checked in the /etc/rcS file (on Solaris 5.X systems) to check if the system runs sulogin, or an equivalent, when booting into single-user mode: # more /etc/rcS/sulogin Alternatively: # grep sulogin /etc/rcS NOTE: The file may be in /sbin. The last resort, if it is not a production system, is to boot the system to single-user mode: # shutdown -g0 -is -y If the system enters single-user mode and no password is required, this is a finding. NOTE: This is a default on Solaris 5.5.1 and later. |
Fix Text (F-31078r1_fix) |
---|
Edit /etc/rcS and set sulogin be run for single-user mode. NOTE: This is a default on Solaris 5.5.1 and later. |