STIGUI
V-271516CAT II — Medium severitySV-271516r1208722_rule

OL 9 must be configured so that the pcscd socket is active.

Rule version OL09-00-000401 · STIG v1 · 2026-08-21

Discussion

The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device.

The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.

Check

Verify that OL 9 pcscd socket is active with the following command:

$ systemctl is-active pcscd.socket active

If the pcscd socket is not active, this is a finding.

Fix

Enable the pcscd socket by running the following command:

$ sudo systemctl enable --now pcscd.socket

Identifiers

Group ID
V-271516
Group title
SRG-OS-000375-GPOS-00160
Rule ID
SV-271516r1208722_rule
Check ID
C-75566r1208348_chk
Fix ID
F-75473r1208349_fix