Check: SOL-11.1-020550
Solaris 11 X86 STIG:
SOL-11.1-020550
(in versions v3 r2 through v1 r17)
Title
The .Xauthority utility must only permit access to authorized hosts. (Cat II impact)
Discussion
If unauthorized clients are permitted access to the X server, a user's X session may be compromised.
Check Content
If X Display Manager (XDM) is not used on the system, this is not applicable. Determine if XDM is running. Procedure: # ps -ef | grep xdm Check the X Window system access is limited to authorized clients. Procedure: # xauth xauth> list Ask the SA if the clients listed are authorized. If any are not, this is a finding.
Fix Text
Remove unauthorized clients from the xauth configuration. Procedure: # xauth remove <display name>
Additional Identifiers
Rule ID: SV-216078r959010_rule
Vulnerability ID: V-216078
Group Title: SRG-OS-000480
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000225 |
Employ the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) which are necessary to accomplish assigned organizational tasks. |
| CCI-000366 |
Implement the security configuration settings. |