Detections
Analytics
AZLX-23-002595 - Amazon Linux 2023 must ensure the pcscd socket is active.
Information
The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device.The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.
Solution
Configure Amazon Linux 2023 so that the pcscd socket is active with the following command:$ sudo systemctl enable --now pcscd.socket
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Amazon_Linux_2023_V1R4_STIG.zip
Item Details
Audit Name: DISA Amazon Linux 2023 STIG v1r4
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-2(6), CAT|II, CCI|CCI-004046, Rule-ID|SV-274181r1208251_rule, STIG-ID|AZLX-23-002595, Vuln-ID|V-274181
Plugin: Unix
Control ID: 759a2a6ccb9e07d5cc512f1cd12708a60d0e6c687d4fc2e22a90d49714cc4aee