Vulnerability Discussion

The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device.

The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.

Check

Verify that OL 9 pcscd service is active with the following command:

$ systemctl is-active pcscd
active

If the pcscdservice is not active, this is a finding.

Fix

Enable the pcscd service with the following command:

$ sudo systemctl enable --now pcscd