Check: GEN002330

Solaris 9 X86 STIG: GEN002330 (in version v1 r9)

Audio devices must not have extended ACLs. (Cat II impact)

File system ACLs can provide access to files beyond what is allowed by the mode numbers of the files.

Check the permissions of audio devices. # ls -lL /dev/audio If the permissions include a "+", the file has an extended ACL and this is a finding.

Remove the extended ACL from the file. # getfacl /dev/audio Remove each ACE returned. # setfacl -d [ACE] /dev/audio

Rule ID: SV-26495r1_rule

Vulnerability ID: V-22367

Group Title:

Expert comments are only available to logged-in users.

CCIs tied to check.

Number	Definition
CCI-000225	The organization employs the concept of least privilege, allowing only authorized accesses for users (and processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions.

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-6	Least Privilege