RHEL 9 must require a unique superusers name upon booting into single-user and maintenance modes.
An XCCDF Rule
Description
Having a nondefault grub superuser username makes password-guessing attacks less effective.
- ID
- SV-257789r1044841_rule
- Version
- RHEL-09-212020
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Configure RHEL 9 to have a unique username for the grub superuser account.
Edit the "/etc/grub.d/01_users" file and add or modify the following lines with a nondefault username for the superuser account:
set superusers="<accountname>"
export superusers