UCF STIG Viewer Logo

Audio devices must be group-owned by root, sys, or bin.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1061 GEN002360 SV-27251r1_rule ECLP-1 Medium
Description
Without privileged group owners, audio devices will be vulnerable to being used as eaves-dropping devices by malicious users or intruders to possibly listen to conversations containing sensitive information.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-28283r1_chk )
Check the group-owner of audio devices.

Procedure:
# ls -lL /dev/audio

If the group-owner of an audio device is not root, sys, or bin, this is a finding.
Fix Text (F-1215r2_fix)
Change the group owner of the audio device.

Procedure:
# chgrp system