Detections
Analytics

1.97 SOL-11.1-040315

Information

Access to a domain console via telnet must be restricted to the local host.

GROUP ID: V-216348
RULE ID: SV-216348r959010

Telnet is an insecure protocol.

Solution

The root role is required. This action applies only to the control domain.

Determine the domain that you are currently securing.

# virtinfo
Domain role: LDoms control I/O service root
The current domain is the control domain, which is also an I/O domain, the service domain, and a root I/O domain.

If the current domain is not the control domain, this action does not apply.

Create a password-controlled role that has the solaris.vntsd.consoles authorization, which permits access to all domain consoles.

# roleadd -A solaris.vntsd.consoles [role-name]
# passwd [role-name]

Assign the new role to a user.

# usermod -R [role-name] [username]

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216348r959010_rule, STIG-ID|SOL-11.1-040315, Vuln-ID|V-216348

Plugin: Unix

Control ID: 2a675a7e3e902a1aadbf4467d8ee865658b6c1fb21aa7942601c024a2c0e8c05