STIGQter: STIG Summary: Solaris 10 SPARC Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The system must be checked for extraneous device files at least weekly.

DISA Rule

SV-226572r603265_rule

Vulnerability Number

V-226572

Group Title

SRG-OS-000363

Rule Version

GEN002260

Severity

CAT III

CCI(s)

• CCI-001744 - The information system implements organization-defined security responses automatically if baseline configurations are changed in an unauthorized manner.

Weight

10

Fix Recommendation

Establish a weekly automated or manual process to create a list of device files on the system and determine if any files have been added, moved, or deleted since the last list was generated.

Generate a list of device files.
# find / -type b -o -type c > device-file-list

Check Contents

Check the system for an automated job, or check with the SA, to determine if the system is checked for extraneous device files on a weekly basis. If no automated or manual process is in place, this is a finding.

Vulnerability Number

V-226572

Documentable

False

Rule Version

GEN002260

Severity Override Guidance

Check the system for an automated job, or check with the SA, to determine if the system is checked for extraneous device files on a weekly basis. If no automated or manual process is in place, this is a finding.

Check Content Reference

M

Target Key

4060

Comments