GEN002260 - The system must be checked for extraneous device files at least weekly.

Information

If an unauthorized device is allowed to exist on the system, there is the possibility the system may perform unauthorized operations.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Establish a weekly automated or manual process to create a list of device files on the system and determine if any files have been added, moved, or deleted since the last list was generated.

A list of device files can be generated with this command:
# find / -type b -o -type c > device-file-list

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-3f., CAT|III, CCI|CCI-000318, Group-ID|V-923, Rule-ID|SV-37543r3_rule, STIG-ID|GEN002260, Vuln-ID|V-923

Plugin: Unix

Control ID: 40eebfd5e896fff8c5267cd4095c401b36fc05e86319f128239c96ce92a4ccbc