An error occurred:

Solaris 11 SPARC STIG

Solaris 11 SPARC Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SOL-11.1-020500 V-216308 Any X Windows host must write .Xauthority files. Cat II
SOL-11.1-020510 V-216309 All .Xauthority files must have mode 0600 or less permissive. Cat II
SOL-11.1-020520 V-216310 The .Xauthority files must not have extended ACLs. Cat II
SOL-11.1-020530 V-216311 X displays must not be exported to the world. Cat I
SOL-11.1-020540 V-216312 .Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server. Cat II
SOL-11.1-020550 V-216313 The .Xauthority utility must only permit access to authorized hosts. Cat II
SOL-11.1-020560 V-216314 X Window System connections that are not required must be disabled. Cat II
SOL-11.1-030010 V-216315 The graphical login service provides the capability of logging into the system using an X-Windows type interface from the console. If graphical login access for the console is required, the service must be in local-only mode. Cat II
SOL-11.1-030030 V-216316 Generic Security Services (GSS) must be disabled. Cat III
SOL-11.1-030040 V-216317 Systems services that are not required must be disabled. Cat III
SOL-11.1-030050 V-216318 TCP Wrappers must be enabled and configured per site policy to only allow access by approved hosts and services. Cat II
SOL-11.1-030060 V-219972 The operating system must disable information system functionality that provides the capability for automatic execution of code on mobile devices without user direction. Cat II
SOL-11.1-040010 V-216321 User passwords must be changed at least every 60 days. Cat II
SOL-11.1-040020 V-216322 The operating system must automatically terminate temporary accounts within 72 hours. Cat III
SOL-11.1-040030 V-216323 The operating system must enforce minimum password lifetime restrictions. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.