The network element must limit privileges to change software resident within software libraries, including privileged programs.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000123-RTR-NA | SRG-NET-000123-RTR-NA | SRG-NET-000123-RTR-NA_rule | Medium |
| Description |
|---|
| Changes to any software components of the network element can have significant effects on the overall security of the network. Therefore, only qualified and authorized individuals should be allowed administrative access to the network element for implementing any changes or upgrades. If the network element were to enable nonauthorized users to make changes to software libraries, those changes could be implemented without undergoing the appropriate testing, validation, and approval. This requirement is applicable to network device management and is not applicable to the routing function. |
| STIG | Date |
|---|---|
| Router Security Requirements Guide | 2013-07-30 |
Details
| Check Text ( C-SRG-NET-000123-RTR-NA_chk ) |
|---|
| This requirement is NA for router. |
| Fix Text (F-SRG-NET-000123-RTR-NA_fix) |
|---|
| This requirement is NA for router. |