SV-220034r603265: Global initialization files must contain the mesg -n or mesg n commands. | Solaris 10 SPARC STIG SCAP Benchmark

Loading benchmark…

Assessment Title

Rule Text

Global initialization files must contain the mesg -n or mesg n commands.

Description

Discussion Text

If the mesg -n or mesg n command is not placed into the system profile, messaging can be used to cause a Denial of Service attack.

How this relates to the STIG checklist: STIG vs SCAP benchmark.

IA Controls

NIST SP 800-53

Not mappedCCI-000366CCE-4746-4V-825SV-39828

References

DPMS Target Solaris 10 SPARC DISA DPMS Target Solaris 10 SPARC 4060

Checks

DISA STIG (Manual Reference)

Check global initialization files for the presence of "mesg -n" or "mesg n".

Procedure:
# grep mesg /etc/.login /etc/profile /etc/bashrc /etc/environment /etc/security/environ /etc/csh.login /etc/csh.cshrc

If no existing global initialization files contain "mesg -n" or "mesg n", this is a finding.

SCC Automation Reference

The reconstructed evaluation script behind this rule's OVAL check(s) — every module a compound check combines, with this rule's own concrete values and DISA's SCC tool's real per-module mechanism curated from static teardown of SCC releases.

#!/bin/bash
# Reconstructed from oval:mil.disa.fso.solaris11:def:119
# Global initialization files must contain the mesg -n or mesg n commands.
# Per-module read mechanism curated from static teardown of DISA's SCC tool
# (SCAP Compliance Checker) -- see the SCC Automation Reference above.

# Check global initialization files must contain the "mesg -n" or "mesg n" commands in  (/etc/login)
# textfilecontent54_object (textfilecontent54_test)
test_1() {
  grep -Pq '^[^#]*mesg[ 	]+-?n' '/etc/.login' &>/dev/null
}
# Check global initialization files must contain the "mesg -n" or "mesg n" commands  (/etc/profile)
# textfilecontent54_object (textfilecontent54_test)
test_2() {
  grep -Pq '^[^#]*mesg[ 	]+-?n' '/etc/profile' &>/dev/null
}
# Check global initialization files must contain the "mesg -n" or "mesg n" commands (/etc/bashrc)
# textfilecontent54_object (textfilecontent54_test)
test_3() {
  grep -Pq '^[^#]*mesg[ 	]+-?n' '/etc/bashrc' &>/dev/null
}
# Check global initialization files must contain the "mesg -n" or "mesg n" commands (/etc/environment)
# textfilecontent54_object (textfilecontent54_test)
test_4() {
  grep -Pq '^[^#]*mesg[ 	]+-?n' '/etc/environment' &>/dev/null
}
# Check global initialization files must contain the "mesg -n" or "mesg n" commands (/etc/security/environ)
# textfilecontent54_object (textfilecontent54_test)
test_5() {
  grep -Pq '^[^#]*mesg[ 	]+-?n' '/etc/security/environ' &>/dev/null
}
# Check global initialization files must contain the "mesg -n" or "mesg n" commands in  (/etc/csh.login)
# textfilecontent54_object (textfilecontent54_test)
test_6() {
  grep -Pq '^[^#]*mesg[ 	]+-?n' '/etc/csh.login' &>/dev/null
}
# Check global initialization files must contain the "mesg -n" or "mesg n" commands in  (/etc/csh.cshrc)
# textfilecontent54_object (textfilecontent54_test)
test_7() {
  grep -Pq '^[^#]*mesg[ 	]+-?n' '/etc/csh.cshrc' &>/dev/null
}

if ! ( test_1 || test_2 || test_3 || test_4 || test_5 || test_6 || test_7 ); then
  echo "PASS"
else
  echo "FAIL"
fi

Assessment Script Powered by AISandbox-executed

A standalone Shell script to assess this control automatically. Review before running it in your environment.

Syntax-checked and actually executed in an isolated sandbox (not the real system this checks) — confirmed to run without errors.

#!/bin/sh
# DISA STIG / SCAP compliance check for global initialization files containing the mesg -n or mesg n commands

check_file() {
    local path="$1"
    local filename="$2"
    local pattern="^[^#]*mesg[ \t]+-?n"
    if [ ! -f "$path/$filename" ]; then
        echo "PASS"
        exit 0
    fi
    if grep -q "$pattern" "$path/$filename"; then
        echo "PASS"
    else
        echo "FAIL"
    fi
    exit 1
}

check_file "/etc" "profile"
check_file "/etc" "bashrc"
check_file "/etc" "environment"
check_file "/etc/security" "environ"
echo "PASS"
exit 0

Remediation

Edit /etc/profile or another global initialization script and add the mesg -n command.