A root kit check tool must be run on the system at least weekly.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22575	GEN008380	SV-26250r1_rule	DCSL-1	Medium

Description
Root kits are software packages designed to conceal the compromise of a system from the SA. Root kit checking tools examine a system for evidence that a root kit is installed. Dedicated root kit detection software or root kit detection capabilities included in anti-virus packages may be used to satisfy this requirement.

STIG	Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE	2015-10-01

Details

Check Text ( C-29315r1_chk )
Ask the SA if a root kit check tool is run on the system weekly. If this is not performed, this is a finding.

Fix Text (F-26347r1_fix)
Create an automated job or establish a site-defined procedure to check the system weekly with a root kit check tool.