STIGQter: STIG Summary: Solaris 10 SPARC Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The system must prevent the root account from directly logging in except from the system console.

DISA Rule

SV-226477r603265_rule

Vulnerability Number

V-226477

Group Title

SRG-OS-000109

Rule Version

GEN000980

Severity

CAT II

CCI(s)

• CCI-000770 - The organization requires individuals to be authenticated with an individual authenticator when a group authenticator is employed.

Weight

10

Fix Recommendation

Edit the /etc/default/login file and uncomment the line containing /dev/console if it is commented out.

Check Contents

Check the CONSOLE setting in /etc/default/login
# grep CONSOLE /etc/default/login
If CONSOLE is set to a value other than /dev/console, this is a finding.

Vulnerability Number

V-226477

Documentable

False

Rule Version

GEN000980

Severity Override Guidance

Check the CONSOLE setting in /etc/default/login
# grep CONSOLE /etc/default/login
If CONSOLE is set to a value other than /dev/console, this is a finding.

Check Content Reference

M

Target Key

4060

Comments