← Back to Oracle Linux 9 Security Technical Implementation Guide

V-271516

CAT II (Medium)

OL 9 must be configured so that the pcscd socket is active.

Rule ID

SV-271516r1208722_rule

STIG

Oracle Linux 9 Security Technical Implementation Guide

Version

V1R6

CCIs

CCI-004046

Discussion

The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device. The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.

Check Content

Verify that OL 9 pcscd socket is active with the following command:

$ systemctl is-active pcscd.socket
active

If the pcscd socket is not active, this is a finding.

Fix Text

Enable the pcscd socket by running the following command:

$ sudo systemctl enable --now pcscd.socket