[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

System objects: Require case insensitivity for non-Windows subsystems

ID: oval:org.secpod.oval:def:8837Date: (C)2013-01-21   (M)2023-07-14
Class: COMPLIANCEFamily: windows




The System objects: Require case insensitivity for non-Windows subsystems setting should be configured correctly. This policy setting determines whether case insensitivity is enforced for all subsystems. The Microsoft Win32 subsystem is case insensitive. However, the kernel supports case sensitivity for other subsystems, such as the Portable Operating System Interface for UNIX (POSIX). Because Windows is case insensitive (but the POSIX subsystem will support case sensitivity), failure to enforce this policy setting makes it possible for a user of the POSIX subsystem to create a file with the same name as another file by using mixed case to label it. Such a situation can block access to these files by another user who uses typical Win32 tools, because only one of the files will be available. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\System objects: Require case insensitivity for non-Windows subsystems (2) KEY: HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\ObCaseInsensitive

Platform:
Microsoft Windows Server 2008 R2
Reference:
CCE-10986-8
CPE    1
cpe:/o:microsoft:windows_server_2008:r2
CCE    1
CCE-10986-8
XCCDF    3
xccdf_org.secpod_benchmark_HIPAA_45CFR_164_Windows_Server_2008_R2
xccdf_org.secpod_benchmark_general_Windows_Server_2008_R2
xccdf_org.secpod_benchmark_PCI_3_2_Windows_Server_2008_R2

© SecPod Technologies