The operating system must reveal error messages to authorized personnel only.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-33199	SRG-OS-000206-NA	SV-43598r1_rule		Medium

Description
If the operating system provides too much information in error logs and administrative messages to the screen, it could lead to compromise. The structure and content of error messages need to be carefully considered by the organization. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account. The user requires access to error messages when disconnected from the enterprise network.

Description

If the operating system provides too much information in error logs and administrative messages to the screen, it could lead to compromise. The structure and content of error messages need to be carefully considered by the organization. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account. The user requires access to error messages when disconnected from the enterprise network.

STIG	Date
Mobile Operating System Security Requirements Guide	2013-07-03

Details

Check Text ( C-41461r1_chk )
This requirement is NA for the Mobile OS SRG.

Fix Text (F-37101r1_fix)
The requirement is NA. No fix is required.