[PATCH 1/2] Updated singleuser mode check to reflect the move away from inittab

Kevin Spargur kspargur at redhat.com
Wed Jul 18 19:16:30 UTC 2012


---
 RHEL6/input/checks/singleuser_password.xml |   16 ++++++++--------
 1 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/RHEL6/input/checks/singleuser_password.xml b/RHEL6/input/checks/singleuser_password.xml
index 3cb78b2..272682e 100644
--- a/RHEL6/input/checks/singleuser_password.xml
+++ b/RHEL6/input/checks/singleuser_password.xml
@@ -13,20 +13,20 @@
     </metadata>
     <criteria>
       <criterion comment="Conditions are satisfied"
-      test_ref="test_20096" />
+      test_ref="test_singleuser_password" />
     </criteria>
   </definition>
   <ind:textfilecontent54_test check="all"
   check_existence="all_exist"
-  comment="Tests the value of the ~~:S:wait:/sbin/sulogin setting in the /etc/inittab file"
-  id="test_20096" version="1">
-    <ind:object object_ref="obj_73" />
+  comment="Tests the value of the SINGLE variable in the /etc/sysconfig/init file, to ensure that a password must be entered to access single user mode it should be set as 'SINGLE=/sbin/sulogin'.  The init file provides further documentation on the configuration of this setting."
+  id="test_singleuser_password" version="1">
+    <ind:object object_ref="obj_singleuser_password" />
   </ind:textfilecontent54_test>
-  <ind:textfilecontent54_object id="obj_73"
+  <ind:textfilecontent54_object id="obj_singleuser_password"
   version="1">
-    <ind:path>/etc</ind:path>
-    <ind:filename>inittab</ind:filename>
-    <ind:pattern operation="pattern match">~:S:wait:/sbin/sulogin</ind:pattern>
+    <ind:path>/etc/sysconfig</ind:path>
+    <ind:filename>init</ind:filename>
+    <ind:pattern operation="pattern match">^SINGLE=/sbin/sulogin[\s#]*</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
 </def-group>
-- 
1.7.7.6



More information about the scap-security-guide mailing list