Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

All device files must be monitored by the system Linux Security Module.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

All device files must be monitored by the system Linux Security Module.

Description

Discussion Text

If a device file carries the SELinux type "unlabeled_t", then SELinux cannot properly restrict access to the device file.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-208803

Rule

SV-208803r793588_rule

Severity

low

Rule Version

OL6-00-000025

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

To check for unlabeled device files, run the following command:

# ls -RZ /dev | grep unlabeled_t

It should produce no output in a well-configured system.

If there is output, this is a finding.

Implementation Procedure

Fix Text

Device files, which are used for communication with important system resources, should be labeled with proper SELinux types. If any device files carry the SELinux type "unlabeled_t", investigate the cause and correct the file's context.

STIG check 11 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-208802The system must use a Linux Security Module configured to limit the privileges of system services.Next · V-208804 →The system must prevent the root account from logging in from virtual consoles.