Restrict Virtual Console Root Logins

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Description

To restrict root logins through the (deprecated) virtual console devices, ensure lines of this form do not appear in /etc/securetty:

vc/1
vc/2
vc/3
vc/4

Rationale

Preventing direct root login to virtual console devices helps ensure accountability for actions taken on the system using the root account.

Remediation

Shell script

The following script can be run on the host to remediate the issue.

#!/bin/bash

sed -i '/^vc\//d' /etc/securetty