Logins to the root account must be restricted to the system console only.
An XCCDF Rule
Description
Use an authorized mechanism such as RBAC and the "su" command to provide administrative access to unprivileged accounts. These mechanisms provide an audit trail in the event of problems.
- ID
- SV-216124r959010_rule
- Version
- SOL-11.1-040430
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
The root role is required.
Modify the /etc/default/login file
# pfedit /etc/default/login