RHEL 10 must disable the ability of systemd to spawn an interactive boot process.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-281300RHEL-10-700980SV-281300r1167050_ruleCCI-000381medium
Description
Using interactive or recovery boot, the console user could disable auditing, firewalls, or other services, weakening system security.
STIGDate
Red Hat Enterprise Linux 10 Security Technical Implementation Guide2026-03-11

Details

Check Text (C-281300r1167050_chk)

Verify RHEL 10 is configured so that the current GRUB 2 configuration disables the ability of systemd to spawn an interactive boot process with the following command: $ sudo grubby --info=ALL | grep args | grep 'systemd.confirm_spawn' If any output is returned, this is a finding.

Fix Text (F-85766r1167049_fix)

Configure RHEL 10 so that the current GRUB 2 configuration disables the ability of systemd to spawn an interactive boot process with the following command: $ sudo grubby --update-kernel=ALL --remove-args="systemd.confirm_spawn"