Detections
Analytics
GEN002340 - Audio devices must be owned by root - '/dev/audio*'
Information
Audio and video devices globally accessible have proven to be another security hazard. There is software that can activate system microphones and video devices connected to user workstations and/or X terminals. Once the microphone has been activated, it is possible to eavesdrop on otherwise private conversations without the victim being aware of it. This action effectively changes the user's microphone into a bugging device.Solution
Edit the /etc/security/console.perms.d/50-default.perms file and comment the following line:<console> 0600 <sound> 0660 root.audio
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-1049, Rule-ID|SV-37575r2_rule, STIG-ID|GEN002340, Vuln-ID|V-1049
Plugin: Unix
Control ID: dbd9ff861507087f6862b550ff71a6631ca40763676d21c34b74a9c1e4739efe