Details

Interactive boot allows console users to interactively select which services start on boot.

The PROMPT option provides console users the ability to interactively boot the system and select which services to start on boot .

Rationale:

Turn off the PROMPT option on the console to prevent console users from potentially overriding established security settings.

Solution

Edit the /etc/sysconfig/init file and set PROMPT to ‘ no ‘:

PROMPT=no

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3152

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6
• CSCv6|5.1
• CSCv7|5.1

Source

• Tenable.com/audits