Title

The /etc/zones directory, and its contents, must not have an extended ACL. (Cat II impact)

Discussion

Solaris zones configuration files must be protected against illicit creation, modification, and deletion.

Check Content

Check the permissions of the file. # ls -lLd /etc/zones # ls -lLR /etc/zones If the permissions of the file or directory contains a "+", an extended ACL is present, this is a finding. If zones are not installed on the system, this is not a finding.

Fix Text

Remove the extended ACL from the file. # chmod A- <file>

Additional Identifiers

Rule ID: SV-227552r603266_rule

Vulnerability ID: V-227552

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.