Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-825 | GEN001780 | SV-825r2_rule | ECSC-1 | Low |
Description |
---|
If the mesg -n or mesg n command is not placed into the system profile, messaging can be used to cause a Denial-of-Service attack. |
STIG | Date |
---|---|
UNIX SRG | 2013-03-26 |
Check Text ( C-603r3_chk ) |
---|
Check global initialization files for the presence of mesg -n or mesg n. Procedure: # grep "mesg" /etc/.login /etc/profile /etc/bashrc /etc/environment /etc/security/environ If no global initialization files contain mesg -n or mesg n, this is a finding. |
Fix Text (F-979r2_fix) |
---|
Edit /etc/profile or another global initialization script and add the mesg -n command. |