An error occurred:

Solaris 11 SPARC STIG

Solaris 11 SPARC Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SOL-11.1-090010 V-216457 A file integrity baseline must be created, maintained, and reviewed at least weekly to determine if unauthorized changes have been made to important system files located in the root file system. Cat II
SOL-11.1-090020 V-219986 The operating system must synchronize internal information system clocks with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS). Cat II
SOL-11.1-090030 V-216459 Direct logins must not be permitted to shared, default, application, or utility accounts. Cat II
SOL-11.1-090040 V-216460 The system must not have any unnecessary accounts. Cat III
SOL-11.1-090050 V-216461 The operating system must conduct backups of user-level information contained in the operating system per organization-defined frequency to conduct backups consistent with recovery time and recovery point objectives. Cat II
SOL-11.1-090060 V-216462 The operating system must conduct backups of system-level information contained in the information system per organization-defined frequency to conduct backups that are consistent with recovery time and recovery point objectives. Cat II
SOL-11.1-090070 V-216463 The operating system must conduct backups of operating system documentation including security-related documentation per organization-defined frequency to conduct backups that is consistent with recovery time and recovery point objectives. Cat II
SOL-11.1-090100 V-216464 The operating system must prevent the execution of prohibited mobile code. Cat II
SOL-11.1-090115 V-216465 The operating system must employ PKI solutions at workstations, servers, or mobile computing devices on the network to create, manage, distribute, use, store, and revoke digital certificates. Cat II
SOL-11.1-090120 V-224670 The operating system must prevent non-privileged users from circumventing malicious code protection capabilities. Cat II
SOL-11.1-090130 V-216467 The operating system must employ malicious code protection mechanisms at workstations, servers, or mobile computing devices on the network to detect and eradicate malicious code transported by electronic mail, electronic mail attachments, web accesses, removable media, or other common means. Cat II
SOL-11.1-090220 V-216469 The operating system must back up audit records at least every seven days onto a different system or system component than the system or component being audited. Cat II
SOL-11.1-090240 V-216470 All manual editing of system-relevant files shall be done using the pfedit command, which logs changes made to the files. Cat III
SOL-11.1-090250 V-219987 The operating system must verify the correct operation of security functions in accordance with organization-defined conditions and in accordance with organization-defined frequency (if periodic verification). Cat II
SOL-11.1-090270 V-224671 The operating system must identify potentially security-relevant error conditions. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.