UCF STIG Viewer Logo

Audio devices must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1049 GEN002340 SV-63301r1_rule Medium
Description
Audio and video devices globally accessible have proven to be another security hazard. There is software that can activate system microphones and video devices connected to user workstations and/or X terminals. Once the microphone has been activated, it is possible to eavesdrop on otherwise private conversations without the victim being aware of it. This action effectively changes the user's microphone into a bugging device.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2020-02-25

Details

Check Text ( C-52001r1_chk )
Check the owner of audio devices.
# ls -lL /dev/audio* /dev/snd/*
If the owner of any audio device file is not root, this is a finding.
Fix Text (F-53889r4_fix)
Edit the /etc/security/console.perms.d/50-default.perms file and comment the following line:

0600 0660 root.audio