Check: GEN008500
Solaris 10 SPARC STIG:
GEN008500
(in versions v2 r4 through v1 r19)
Title
The system must have IEEE 1394 (Firewire) disabled unless needed. (Cat III impact)
Discussion
Firewire is a common computer peripheral interface. Firewire devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.
Check Content
If the system needs IEEE 1394 (Firewire), this is not applicable. Check if the firewire module is not disabled. # grep 'exclude: s1394' /etc/system If no results are returned, this is a finding.
Fix Text
Disable the firewire module. # echo "exclude: s1394" >> /etc/system Reboot for the changes to take effect.
Additional Identifiers
Rule ID: SV-227070r603265_rule
Vulnerability ID: V-227070
Group Title: SRG-OS-000480
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-6 |
Configuration Settings |