Navigate

Check: GEN000020

Solaris 10 SPARC STIG: GEN000020 (in versions v2 r4 through v1 r19)

Title

The system must require authentication upon booting into single-user and maintenance modes. (Cat II impact)

Discussion

If the system does not require valid root authentication before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system.

Check Content

This can be checked in the /etc/default/sulogin file (on Solaris 5.X systems) to check if the system runs sulogin, or an equivalent, when booting into single-user mode.

Fix Text

Edit /etc/default/sulogin and set PASSREQ=YES or remove /etc/default/sulogin entirely. NOTE: This is a default on Solaris 5.5.1 and later.

Additional Identifiers

Rule ID: SV-220019r603265_rule

Vulnerability ID: V-220019

Group Title: SRG-OS-000080

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000213	The information system enforces approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-3	Access Enforcement