Detections
Analytics

RHEL-10-200611 - RHEL 10 must have the "pcscd" socket set to active.

Information

The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device.

The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.

Solution

Configure RHEL 10 to have the "pcscd" socket set to active with the following command:

$ sudo systemctl enable --now pcscd.socket

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R3_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2(6), CAT|II, CCI|CCI-004046, Rule-ID|SV-280973r1268242_rule, STIG-ID|RHEL-10-200611, Vuln-ID|V-280973

Plugin: Unix

Control ID: ba6209320cbadef5cc6bf8c22b8c12c6d09a3f8cedb00fb99f6f422946095739