SV-226578r603265: Audio devices must be group-owned by root, sys, or bin. | Solaris 10 SPARC STIG SCAP Benchmark

Loading benchmark…

Assessment Title

Rule Text

Audio devices must be group-owned by root, sys, or bin.

Description

Discussion Text

Without privileged group owners, audio devices will be vulnerable to being used as eaves-dropping devices by malicious users or intruders to possibly listen to conversations containing sensitive information.

How this relates to the STIG checklist: STIG vs SCAP benchmark.

IA Controls

NIST SP 800-53

Not mappedCCI-000366SV-27251V-1061

References

DPMS Target Solaris 10 SPARC DISA DPMS Target Solaris 10 SPARC 4060

Checks

DISA STIG (Manual Reference)

Check the group-owner of audio devices.

Procedure:
# ls -lL /dev/audio

If the group-owner of an audio device is not root, sys, or bin, this is a finding.

SCC Automation Reference

The reconstructed evaluation script behind this rule's OVAL check(s) — every module a compound check combines, with this rule's own concrete values and DISA's SCC tool's real per-module mechanism curated from static teardown of SCC releases.

Assessment Script Powered by AISandbox-executed

A standalone Shell script to assess this control automatically. Review before running it in your environment.

Syntax-checked and actually executed in an isolated sandbox (not the real system this checks) — confirmed to run without errors.

#!/bin/sh
# OVAL Definition: oval:mil.disa.fso.solaris11:def:145
if [ ! -d "/dev" ]; then echo "PASS"; exit 0; fi
for audio_device in /dev/^.*audio.*$; do [ -e "$audio_device" ] || continue; gid=$(stat -c "%g" "$audio_device"); if [ $gid -eq 0 ] || [ $gid -eq 2 ] || [ $gid -eq 3 ]; then continue; else echo "FAIL"; exit 1; fi; done; echo "PASS"; exit 0;

Remediation

Change the group owner of the audio device.

Procedure:
# chgrp system <audio device>