Solaris 11 SPARC STIG

Solaris 11 SPARC Security Technical Implementation Guide

ID	Vuln ID	Title	Cat
SOL-11.1-040230	V-216340	The operating system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.	Cat II
SOL-11.1-040250	V-216341	The default umask for system and users must be 077.	Cat II
SOL-11.1-040260	V-216342	The default umask for FTP users must be 077.	Cat III
SOL-11.1-040270	V-216343	The value mesg n must be configured as the default setting for all users.	Cat III
SOL-11.1-040280	V-216344	User accounts must be locked after 35 days of inactivity.	Cat II
SOL-11.1-040310	V-216347	Login services for serial ports must be disabled.	Cat II
SOL-11.1-040315	V-216348	Access to a domain console via telnet must be restricted to the local host.	Cat II
SOL-11.1-040316	V-216349	Access to a logical domain console must be restricted to authorized users.	Cat II
SOL-11.1-040320	V-216350	The nobody access for RPC encryption key storage service must be disabled.	Cat II
SOL-11.1-040330	V-216351	X11 forwarding for SSH must be disabled.	Cat II
SOL-11.1-040331	V-233300	The sshd server must bind the X11 forwarding server to the loopback address.	Cat II
SOL-11.1-040340	V-216352	Consecutive login attempts for SSH must be limited to 3.	Cat III
SOL-11.1-040350	V-216353	The rhost-based authentication for SSH must be disabled.	Cat II
SOL-11.1-040360	V-216354	Direct root account login must not be permitted for SSH access.	Cat II
SOL-11.1-040370	V-216355	Login must not be permitted with empty/null passwords for SSH.	Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.