Detections
Analytics

1.6.1.6 Ensure no unconfined daemons exist

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Since daemons are launched and descend from the init process, they will inherit the security context label initrc_t. This could cause the unintended consequence of giving the process more permission than it requires.

Solution

Investigate any unconfined daemons found during the audit action. They may need to have an existing security context assigned to them or a policy built for them.

See Also

https://workbench.cisecurity.org/files/1861

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3(3), CSCv6|14.4

Plugin: Unix

Control ID: 086465418e5a963b40d1ee5ec1dfed5a399fe1ab9177e38cea917e98e8030025