1.94 SOL-11.1-040270

Information

The value mesg n must be configured as the default setting for all users.

GROUP ID: V-216108RULE ID: SV-216108r959010

The "mesg n" command blocks attempts to use the "write" or "talk" commands to contact users at their terminals, but has the side effect of slightly strengthening permissions on the user's TTY device.

Solution

The root role is required.

Edit the default profile configuration files.

pfedit /etc/profilepfedit /etc/.login

In each file add a new line:

mesg n

For each user on the system, enter the command:

mesg n

See Also

https://workbench.cisecurity.org/benchmarks/23873