Table of Contents

1.4.3 Ensure authentication required for single user mode (Scored)

Profile Applicability

Level 1 - Server 
Level 1 - Workstation

Description

Single user mode is used for recovery when the system detects an issue during boot or by manual selection from the bootloader.

Rationale

Requiring authentication in single user mode prevents an unauthorized user from rebooting the system into single user to gain root privileges without credentials.

Audit

Perform the following to determine if a password is set for the root user:

# grep ^root:[*\!]: /etc/shadow

No results should be returned.

Remediation

Run the following command and follow the prompts to set a password for the root user:

# passwd root