STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The system must be checked for extraneous device files at least weekly.

DISA Rule

SV-227698r603266_rule

Vulnerability Number

V-227698

Group Title

SRG-OS-000363

Rule Version

GEN002260

Severity

CAT III

CCI(s)

• CCI-001744 - The information system implements organization-defined security responses automatically if baseline configurations are changed in an unauthorized manner.

Weight

10

Fix Recommendation

Establish a weekly automated or manual process to create a list of device files on the system and determine if any files have been added, moved, or deleted since the last list was generated.

Generate a list of device files.
# find / -type b -o -type c > device-file-list

Check Contents

Check the system for an automated job, or check with the SA, to determine if the system is checked for extraneous device files on a weekly basis. If no automated or manual process is in place, this is a finding.

Vulnerability Number

V-227698

Documentable

False

Rule Version

GEN002260

Severity Override Guidance

Check the system for an automated job, or check with the SA, to determine if the system is checked for extraneous device files on a weekly basis. If no automated or manual process is in place, this is a finding.

Check Content Reference

M

Target Key

4061

Comments