1.4.3 Ensure authentication required for single user mode

Audit

Perform the following to determine if a password is set for the root user:

# grep -Eq '^root:\$[0-9]' /etc/shadow || echo "root is locked"

No results should be returned.

Remediation

Run the following command and follow the prompts to set a password for the root user:

# passwd root