UCF STIG Viewer Logo

The file integrity tool must be configured to verify extended attributes.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227046 GEN006571 SV-227046r603265_rule Low
Description
Extended attributes in file systems are used to contain arbitrary data and file metadata with security implications.
STIG Date
Solaris 10 SPARC Security Technical Implementation Guide 2020-12-04

Details

Check Text ( C-29208r485501_chk )
If using AIDE, verify the configuration contains the xattrs option for all monitored files and directories. Here is an example AIDE configuration fragment.

SampleRule = p+i+l+n+u+g+s+m+c+acl+xattrs+sha256
/bin SampleRule

If the xattrs option is not present, this is a finding.

If using a different file integrity tool, check the configuration per tool documentation.
Fix Text (F-29196r485502_fix)
If using AIDE, edit the configuration and add the xattrs option for all monitored files and directories.

If using a different file integrity tool, configure extended attributes checking per the tool's documentation.