AlmaLinux OS 9 must require authentication to access single-user mode.
An XCCDF Rule
Description
This requirement prevents attackers with physical access from easily bypassing security on the machine and gaining root access. Such accesses are further prevented by configuring the bootloader password.
- ID
- SV-269139r1050021_rule
- Version
- ALMA-09-006510
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure AlmaLinux OS 9 to require authentication for single-user mode.
Add or modify the following line in the "/usr/lib/systemd/system/rescue.service" file:
ExecStart=-/usr/lib/systemd/systemd-sulogin-shell rescue
"sudo systemctl edit rescue.service" can also be used to create a "/etc/systemd/system/rescue.service.d/override.conf" file.