An error occurred:

Solaris 11 SPARC STIG

Solaris 11 SPARC Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SOL-11.1-040380 V-216356 The operating system must terminate the network connection associated with a communications session at the end of the session or after 10 minutes of inactivity. Cat III
SOL-11.1-040390 V-216357 Host-based authentication for login-based services must be disabled. Cat II
SOL-11.1-040400 V-216358 The use of FTP must be restricted. Cat II
SOL-11.1-040410 V-216359 The system must not allow autologin capabilities from the GNOME desktop. Cat I
SOL-11.1-040420 V-216360 Unauthorized use of the at or cron capabilities must not be permitted. Cat II
SOL-11.1-040430 V-216361 Logins to the root account must be restricted to the system console only. Cat II
SOL-11.1-040450 V-216362 The operating system, upon successful logon, must display to the user the date and time of the last logon (access). Cat III
SOL-11.1-040460 V-216363 The operating system must provide the capability for users to directly initiate session lock mechanisms. Cat II
SOL-11.1-040470 V-216364 The operating system session lock mechanism, when activated on a device with a display screen, must place a publicly viewable pattern onto the associated display, hiding what was previously visible on the screen. Cat II
SOL-11.1-040480 V-216365 The operating system must not allow logins for users with blank passwords. Cat I
SOL-11.1-040490 V-216366 The operating system must prevent remote devices that have established a non-remote connection with the system from communicating outside of the communication path with resources in external networks. Cat II
SOL-11.1-040500 V-216367 The operating system must limit the number of concurrent sessions for each account to an organization-defined number of sessions. Cat III
SOL-11.1-050010 V-216368 The system must disable directed broadcast packet forwarding. Cat III
SOL-11.1-050020 V-216369 The system must not respond to ICMP timestamp requests. Cat III
SOL-11.1-050030 V-216370 The system must not respond to ICMP broadcast timestamp requests. Cat III

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.