← Back to Red Hat Enterprise Linux 10 Security Technical Implementation Guide

V-280973

CAT II (Medium)

RHEL 10 must have the "pcscd" service set to active.

Rule ID

SV-280973r1165274_rule

STIG

Red Hat Enterprise Linux 10 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-004046

Discussion

The information system ensures that even if it is compromised, that compromise will not affect credentials stored on the authentication device. The daemon program for "pcsc-lite" and the MuscleCard framework is "pcscd". It is a resource manager that coordinates communications with smart card readers, smart cards, and cryptographic tokens that are connected to the system.

Check Content

Verify RHEL 10 has the "pcscd" socket set to active with the following command:

$ systemctl is-active pcscd.socket
active

If the "pcscd" socket is not active, this is a finding.

Fix Text

Configure RHEL 10 to have the "pcscd" socket set to active with the following command:

$ sudo systemctl enable --now pcscd.socket