Detections
Analytics

GEN002360 - Audio devices must be group-owned by root, sys, bin, or system.

Information

Without privileged group owners, audio devices will be vulnerable to being used as eaves-dropping devices by malicious users or intruders to possibly listen to conversations containing sensitive information.

Solution

Change the group owner of the audio device.

Procedure:
# chgrp system <audio device>

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-1061, Rule-ID|SV-27253r1_rule, STIG-ID|GEN002360, Vuln-ID|V-1061

Plugin: Unix

Control ID: 30c1521fd6f86a4f653b36d8e07a39927023db1225adb57514aa8fbdcce5cdb9