GEN006571 - The file integrity tool must be configured to verify extended attributes - used

Information

Extended attributes in file systems are used to contain arbitrary data and file metadata with security implications.

Solution

If using AIDE, edit the configuration and add the xattrs option for all monitored files and directories.

If using a different file integrity tool, configure extended attributes checking per the tool's documentation.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-6a., CAT|III, CCI|CCI-002696, Rule-ID|SV-227954r854520_rule, STIG-ID|GEN006571, STIG-Legacy|SV-26860, STIG-Legacy|V-22508, Vuln-ID|V-227954

Plugin: Unix

Control ID: 3205f0b3688140f097bafecb4fa84c76f635dc1564b766521c003764b260666d