STIGQter: STIG Summary: Oracle Linux 6 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

All device files must be monitored by the system Linux Security Module.

DISA Rule

SV-208803r603263_rule

Vulnerability Number

V-208803

Group Title

SRG-OS-000480

Rule Version

OL6-00-000025

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Device files, which are used for communication with important system resources, should be labeled with proper SELinux types. If any device files carry the SELinux type "unlabeled_t", investigate the cause and correct the file's context.

Check Contents

To check for unlabeled device files, run the following command:

# ls -RZ /dev | grep unlabeled_t

It should produce no output in a well-configured system.

If there is output, this is a finding.

Vulnerability Number

V-208803

Documentable

False

Rule Version

OL6-00-000025

Severity Override Guidance

To check for unlabeled device files, run the following command:

# ls -RZ /dev | grep unlabeled_t

It should produce no output in a well-configured system.

If there is output, this is a finding.

Check Content Reference

M

Target Key

2928

Comments