Detections
Analytics
GEN002260 - The system must be checked for extraneous device files at least weekly.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
If an unauthorized device is allowed to exist on the system, there is the possibility the system may perform unauthorized operations.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Establish a weekly automated or manual process to create a list of device files on the system and determine if any files have been added, moved, or deleted since the last list was generated.A list of device files can be generated with this command:
# find / -type b -o -type c > device-file-list
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_5_V1R14_STIG.zip
Item Details
Audit Name: DISA STIG for Oracle Linux 5 v1r14
References: CAT|III, CCI|CCI-000318, Rule-ID|SV-63209r3_rule, STIG-ID|GEN002260, Vuln-ID|V-923
Plugin: Unix
Control ID: ea00a61ddd878859b0823043955bb46a58bb234f61c0fcd386336a0270dae35f