An error occurred:

Solaris 11 X86 STIG

Solaris 11 X86 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SOL-11.1-080030 V-216207 Address Space Layout Randomization (ASLR) must be enabled. Cat III
SOL-11.1-080040 V-216208 Process core dumps must be disabled unless needed. Cat II
SOL-11.1-080045 V-216209 The system must be configured to store any process core dumps in a specific, centralized directory. Cat II
SOL-11.1-080050 V-216210 The centralized process core dump data directory must be owned by root. Cat II
SOL-11.1-080060 V-216211 The centralized process core dump data directory must be group-owned by root, bin, or sys. Cat II
SOL-11.1-080070 V-216212 The centralized process core dump data directory must have mode 0700 or less permissive. Cat II
SOL-11.1-080080 V-216213 Kernel core dumps must be disabled unless needed. Cat II
SOL-11.1-080090 V-216214 The kernel core dump data directory must be owned by root. Cat II
SOL-11.1-080100 V-216215 The kernel core dump data directory must be group-owned by root. Cat II
SOL-11.1-080110 V-216216 The kernel core dump data directory must have mode 0700 or less permissive. Cat II
SOL-11.1-080120 V-216217 System BIOS or system controllers supporting password protection must have administrator accounts/passwords configured, and no others. (Intel) Cat III
SOL-11.1-080140 V-216218 The system must require authentication before allowing modification of the boot devices or menus. Secure the GRUB Menu (Intel). Cat III
SOL-11.1-080150 V-216219 The operating system must implement transaction recovery for transaction-based systems. Cat II
SOL-11.1-080160 V-216220 SNMP communities, users, and passphrases must be changed from the default. Cat I
SOL-11.1-090010 V-216221 A file integrity baseline must be created, maintained, and reviewed at least weekly to determine if unauthorized changes have been made to important system files located in the root file system. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.