OL 9 must be configured so that the pcscd socket is active.

STIG ID: OL09-00-000401  |  SRG: SRG-OS-000375-GPOS-00160 |  Severity: medium (CAT II)  |  CCI: CCI-004046 |  Vulnerability Id: V-271516

Vulnerability Discussion

The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device.

The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.

Check

Verify that OL 9 pcscd socket is active with the following command:

$ systemctl is-active pcscd.socket
active

If the pcscd socket is not active, this is a finding.

Fix

Enable the pcscd socket by running the following command:

$ sudo systemctl enable --now pcscd.socket