Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-226577 | GEN002340 | SV-226577r603265_rule | Medium |
Description |
---|
Globally Accessible audio and video devices have proven to be security hazards. There is software that can activate system microphones and video devices connected to user workstations and/or X terminals. Once the microphone has been activated, it is possible to eavesdrop on otherwise private conversations without the victim being aware of it. This action effectively changes the user's microphone to a bugging device. |
STIG | Date |
---|---|
Solaris 10 SPARC Security Technical Implementation Guide | 2022-09-07 |
Check Text ( C-28738r483140_chk ) |
---|
Check the owner of audio devices. # ls -lL /dev/audio If the owner of any audio device file is not root, this is a finding. |
Fix Text (F-28726r483141_fix) |
---|
Change the owner of the audio device. # chown root |