Rule ID
SV-44672r1_rule
Version
V1R12
The securetty file contains the list of terminals permitting direct root logins. It must be protected from unauthorized modification.
Check /etc/securetty ownership. Procedure: # ls –lL /etc/securetty If /etc/securetty is not owned by root, this is a finding.
Change the owner of the /etc/securetty file to root. Procedure: # chown root /etc/securetty