STIGQter: STIG Summary: Dragos Platform 2.x Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Apr 2026:

Dragos Platforms must limit privileges and not allow the ability to run shell.

DISA Rule

SV-270947r1155102_rule

Vulnerability Number

V-270947

Group Title

SRG-APP-000133

Rule Version

DRAG-OT-000520

Severity

CAT I

CCI(s)

• CCI-001499 - Limit privileges to change software resident within software libraries.
• CCI-001166 - Identify organization-defined unacceptable mobile code.
• CCI-001094 - Restrict the ability of individuals to launch organization-defined denial of service attacks against other systems.
• CCI-002235 - Prevent non-privileged users from executing privileged functions.
• CCI-002233 - Prevent the organization-defined software from executing at higher privilege levels than users executing the software.
• CCI-001764 - Prevent program execution in accordance with organization-defined policies, rules of behavior, and/or access agreements regarding software program usage and restrictions; rules authorizing the terms and conditions of software program usage.

Weight

10

Fix Recommendation

Uninstall shell environment:

Log in to the Dragos Platform CLI.

Execute the following command:
elevate

Enter the elevate password, then execute the following command:
disable shell

Once this has been executed, users cannot create interactive bash shell sessions. This command removes the shell from the Platform; it can only be enabled again if the dragos_admin user authenticates and changes the configuration for maintenance.

Note: Access to the bash shell via the "run shell" command is disabled bu default.

Check Contents

Verify shell environment:

Log in to the Dragos Platform CLI.

Execute the following command:
elevate

Enter the elevate (admin) password, then execute the following command:
run shell

If the option "run shell" executes successfully and places the terminal session into a shell environment, this is a finding.

Note: A shell environment will be noticeable because the terminal line will be in the format "user@dragos:~$" compared to dragoscmd, which would be "dragos>". If shell is properly uninstalled, the return will be "Error: No such command 'shell'." The shell can be enabled and disabled as needed for troubleshooting efforts with appropriate authentication as dragos_admin.

Vulnerability Number

V-270947

Documentable

False

Rule Version

DRAG-OT-000520

Severity Override Guidance

Verify shell environment:

Log in to the Dragos Platform CLI.

Execute the following command:
elevate

Enter the elevate (admin) password, then execute the following command:
run shell

If the option "run shell" executes successfully and places the terminal session into a shell environment, this is a finding.

Note: A shell environment will be noticeable because the terminal line will be in the format "user@dragos:~$" compared to dragoscmd, which would be "dragos>". If shell is properly uninstalled, the return will be "Error: No such command 'shell'." The shell can be enabled and disabled as needed for troubleshooting efforts with appropriate authentication as dragos_admin.

Check Content Reference

M

Target Key

5675