Description

To restrict root logins through the (deprecated) virtual console devices, ensure lines of this form do not appear in /etc/securetty:

vc/1
vc/2
vc/3
vc/4

Rationale

Preventing direct root login to virtual console devices helps ensure accountability for actions taken on the system using the root account.

Remediation

Shell script

The following script can be run on the host to remediate the issue.

#!/bin/bash

sed -i '/^vc\//d' /etc/securetty