Detections
Analytics

1.94 SOL-11.1-040270

Information

The value mesg n must be configured as the default setting for all users.

GROUP ID: V-216343
RULE ID: SV-216343r959010

The "mesg n" command blocks attempts to use the "write" or "talk" commands to contact users at their terminals, but has the side effect of slightly strengthening permissions on the user's TTY device.

Solution

The root role is required.

Edit the default profile configuration files.

# pfedit /etc/profile
# pfedit /etc/.login

In each file add a new line:

mesg n

For each user on the system, enter the command:

# mesg n

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216343r959010_rule, STIG-ID|SOL-11.1-040270, Vuln-ID|V-216343

Plugin: Unix

Control ID: e0095c63be72ed162eff549174d712ffe2e0e719205dae4dd8b8e5ad9f26a615