The Oracle Linux operating system must be configured so that all system device files are correctly labeled to prevent unauthorized modification.
An XCCDF Rule
Description
<VulnDiscussion>If an unauthorized or modified device is allowed to exist on the system, there is the possibility the system may perform unintended or unauthorized operations.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-221740r991589_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Run the following command to determine which package owns the device file:
# rpm -qf <filename>
The package can be reinstalled from a yum repository using the command: