Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22575 | GEN008380 | SV-37978r1_rule | DCSL-1 | Medium |
Description |
---|
Root kits are software packages designed to conceal the compromise of a system from the SA. Root kit checking tools examine a system for evidence that a root kit is installed. Dedicated root kit detection software or root kit detection capabilities included in anti-virus packages may be used to satisfy this requirement. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2013-04-10 |
Check Text ( C-37274r1_chk ) |
---|
Ask the SA if a root kit check tool is run on the system weekly. If this is not performed, this is a finding. |
Fix Text (F-32511r1_fix) |
---|
Create an automated job or establish a site-defined procedure to check the system weekly with a root kit check tool. |