An error occurred:

Solaris 11 X86 STIG

Solaris 11 X86 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SOL-11.1-020500 V-216073 Any X Windows host must write .Xauthority files. Cat II
SOL-11.1-020510 V-216074 All .Xauthority files must have mode 0600 or less permissive. Cat II
SOL-11.1-020520 V-216075 The .Xauthority files must not have extended ACLs. Cat II
SOL-11.1-020530 V-216076 X displays must not be exported to the world. Cat I
SOL-11.1-020540 V-216077 .Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server. Cat II
SOL-11.1-020550 V-216078 The .Xauthority utility must only permit access to authorized hosts. Cat II
SOL-11.1-020560 V-216079 X Window System connections that are not required must be disabled. Cat II
SOL-11.1-030010 V-216080 The graphical login service provides the capability of logging into the system using an X-Windows type interface from the console. If graphical login access for the console is required, the service must be in local-only mode. Cat II
SOL-11.1-030030 V-216081 Generic Security Services (GSS) must be disabled. Cat III
SOL-11.1-030040 V-216082 Systems services that are not required must be disabled. Cat III
SOL-11.1-030050 V-216083 TCP Wrappers must be enabled and configured per site policy to only allow access by approved hosts and services. Cat II
SOL-11.1-030060 V-220000 The operating system must disable information system functionality that provides the capability for automatic execution of code on mobile devices without user direction. Cat II
SOL-11.1-040010 V-216086 User passwords must be changed at least every 60 days. Cat II
SOL-11.1-040020 V-216087 The operating system must automatically terminate temporary accounts within 72 hours. Cat III
SOL-11.1-040030 V-216088 The operating system must enforce minimum password lifetime restrictions. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.