V-285682

Discussion

Hardware components provide the foundation for organizational systems and the platform for the execution of authorized software programs. Managing the inventory of hardware components and controlling which hardware components are permitted to be installed or connected to organizational systems is essential to provide adequate security.

Check Content

Verify Harvester Government disables automatic issue/banner generation through udev rules.

1. Access Harvester Government using a privileged account and verify the "udev issue-generator" rule is disabled:

ls -l /etc/udev/rules.d/90-issue-generator.rules

2.Verify the output shows the file is a symbolic link to "/dev/null":

/etc/udev/rules.d/90-issue-generator.rules -> /dev/null

If "/etc/udev/rules.d/90-issue-generator.rules" exists and is not a symbolic link, this is a finding.

If "/etc/udev/rules.d/90-issue-generator.rules" is a symbolic link but does not point to /dev/null, this is a finding.

If the file is missing, verify Harvester Government does not use udev rule to dynamically generate or overwrite the configured login banner. If automatic banner generation is enabled or may overwrite the approved notification banner, this is a finding.