Title

The /etc/zones directory, and its contents, must be owned by root. (Cat II impact)

Discussion

Solaris zones configuration files must be protected against illicit creation, modification, and deletion.

Check Content

Check the ownership of the files and directories. # ls -lLdR /etc/zones If the owner of the file is not root, this is a finding. If zones are not installed on the system, this is not a finding.

Fix Text

Change the ownership of the files and directories. # chown -R root /etc/zones

Additional Identifiers

Rule ID: SV-226423r603265_rule

Vulnerability ID: V-226423

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.