Check: GEN002340
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE:
GEN002340
(in versions v1 r14 through v1 r10)
Title
Audio devices must be owned by root. (Cat II impact)
Discussion
Audio and video devices that are globally accessible have proven to be another security hazard. There is software that can activate system microphones and video devices connected to user workstations and/or X terminals. Once the microphone has been activated, it is possible to eavesdrop on otherwise private conversations without the victim being aware of it. This action effectively changes the user's microphone to a bugging device.
Check Content
Check the owner of audio devices. Procedure: # /usr/sbin/lsdev -C | grep -i audio # ls -lL /dev/*aud0 If the owner of any audio device file is not root, this is a finding.
Fix Text
Change the owner of the audio device. # chown root <audio device>
Additional Identifiers
Rule ID: SV-27248r1_rule
Vulnerability ID: V-1049
Group Title: GEN002340
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000225 |
The organization employs the concept of least privilege, allowing only authorized accesses for users (and processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions. |
Controls
| Number | Title |
|---|---|
| AC-6 |
Least Privilege |