UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Audio devices must be group-owned by root, sys, bin, or system.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1061 GEN002360 SV-37577r1_rule ECLP-1 Medium
Description
Without privileged group owners, audio devices will be vulnerable to being used as eaves-dropping devices by malicious users or intruders to possibly listen to conversations containing sensitive information.
STIG Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide 2014-01-09

Details

Check Text ( C-36404r1_chk )
Check the group-owner of audio devices.

Procedure:
# ls -lL /dev/audio* /dev/snd/*

If the group-owner of an audio device is not root, sys, bin, or system, this is a finding.
Fix Text (F-31613r1_fix)
Change the group-owner of the audio device.

Procedure:
# chgrp root