Title

The operating system must uniquely identify peripherals before establishing a connection. (Cat II impact)

Discussion

Without identifying devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. Peripherals include, but are not limited to, such devices as flash drives, external storage, and printers. Satisfies: SRG-OS-000114-GPOS-00059

Check Content

Verify the operating system uniquely identifies peripherals before establishing a connection. If it does not, this is a finding. $ cat /etc/devd.conf Check if automounting is enabled by looking for a section similar to notify 100 { match "system" "GEOM"; match "subsystem" "DEV"; action "/usr/sbin/automount -c"; }; This file also lists other USB device configuration items. Broad matches with non-specific actions may be a finding.

Fix Text

Configure the operating system to uniquely identify peripherals before establishing a connection.

Additional Identifiers

Rule ID:

Vulnerability ID: V-590

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.