{"id":6084,"date":"2016-07-29T09:00:51","date_gmt":"2016-07-29T01:00:51","guid":{"rendered":"http:\/\/rmohan.com\/?p=6084"},"modified":"2016-07-29T09:00:51","modified_gmt":"2016-07-29T01:00:51","slug":"single-user-mode-is-password-protected-by-the-root-password-on-rhel-7","status":"publish","type":"post","link":"https:\/\/mohan.sg\/?p=6084","title":{"rendered":"Single User mode is password protected by the root password on RHEL 7"},"content":{"rendered":"

# RHEL 5
\n# ——————————————————————————————<\/p>\n

# To force users to enter password in Single User mode, add following line to \/etc\/inittab:<\/p>\n

~:S:respawn:\/sbin\/sulogin<\/p>\n

# The changes to this file takes effect after a system reboot<\/p>\n

# To make init re-read the \/etc\/inittab without rebooting the system, type the command<\/p>\n

\/sbin\/init q<\/p>\n

# RHEL 6
\n# ——————————————————————————————<\/p>\n

# Edit \/etc\/inittab and add “su:S:wait:\/sbin\/sulogin” before ‘initdefault’ line:<\/p>\n

vi \/etc\/inittab
\n […]
\n su:S:wait:\/sbin\/sulogin
\n id:3:initdefault:<\/p>\n

# Edit \/etc\/sysconfig\/init and replace “SINGLE=\/sbin\/sushell” with “SINGLE=\/sbin\/sulogin”:<\/p>\n

vi \/etc\/sysconfig\/init
\n […]
\n # Set to ‘\/sbin\/sulogin’ to prompt for password on single-user mode
\n # Set to ‘\/sbin\/sushell’ otherwise
\n SINGLE=\/sbin\/sulogin<\/p>\n

# RHEL 7
\n# ——————————————————————————————<\/p>\n

# By default, Single User mode is password protected by the root password on RHEL 7:<\/p>\n

cat \/usr\/lib\/systemd\/system\/rescue.service
\n […]<\/p>\n

[Service]
\n Environment=HOME=\/root
\n WorkingDirectory=\/root
\n ExecStartPre=-\/bin\/plymouth quit
\n ExecStartPre=-\/bin\/echo -e ‘Welcome to emergency mode! After logging in, type […]
\n ExecStart=-\/bin\/sh -c “\/usr\/sbin\/sulogin; \/usr\/bin\/systemctl –fail –no-block default” <---\n Type=idle\n StandardInput=tty-force\n StandardOutput=inherit\n StandardError=inherit\n KillMode=process\n IgnoreSIGPIPE=no\n SendSIGHUP=yes\n<\/p>\n","protected":false},"excerpt":{"rendered":"

# RHEL 5 # ——————————————————————————————<\/p>\n

# To force users to enter password in Single User mode, add following line to \/etc\/inittab:<\/p>\n

~:S:respawn:\/sbin\/sulogin<\/p>\n

# The changes to this file takes effect after a system reboot<\/p>\n

# To make init re-read the \/etc\/inittab without rebooting the system, type the command<\/p>\n

\/sbin\/init q<\/p>\n

# RHEL 6 # ——————————————————————————————<\/p>\n

[…]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[73],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6084"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6084"}],"version-history":[{"count":1,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6084\/revisions"}],"predecessor-version":[{"id":6085,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6084\/revisions\/6085"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6084"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6084"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6084"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}