Item Search

NameAudit NamePluginCategory
GEN002750 - The audit system must be configured to audit account creation - naflags +ua and -uaDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN002751 - The audit system must be configured to audit account modification - naflags uaDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN002752 - The audit system must be configured to audit account disabling - naflags +ua and -uaDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN002753 - The audit system must be configured to audit account termination - flags +ua and -uaDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN002753 - The audit system must be configured to audit account termination - naflags +ua and -uaDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN002760 - The audit system must be configured to audit all administrative, privileged, and security actions - flags amDISA STIG Solaris 10 X86 v2r4Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - The audit system must be configured to audit login, logout, and session initiation - naflags +lo and -loDISA STIG Solaris 10 X86 v2r4Unix

AUDIT AND ACCOUNTABILITY

GEN002860 - Audit logs must be rotated daily.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003020 - Cron must not execute programs in, or subordinate to, world-writable directories.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003040 - Crontabs must be owned by root or the crontab creator.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003090 - Crontab files must not have extended ACLs.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003160 - Cron logging must be implemented - configuredDISA STIG Solaris 10 X86 v2r4Unix

AUDIT AND ACCOUNTABILITY

GEN003160 - Cron logging must be implemented - log existsDISA STIG Solaris 10 X86 v2r4Unix

AUDIT AND ACCOUNTABILITY

GEN003250 - The cron.allow file must be group-owned by root, bin, or sys.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003300 - The at.deny file must not be empty if it exists.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003400 - The 'at' directory must have mode 0755 or less permissive - at directory must have mode 0755 or less permissive.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN003490 - The at.deny file must be group-owned by root, bin, or sys.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003522 - The kernel core dump data directory must have mode 0700 or less permissive.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003607 - The system must not accept source-routed IPv4 packets - ssrrDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003609 - The system must ignore IPv4 ICMP redirect messages.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003620 - A separate file system must be used for user home directories (such as /home or equivalent).DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003623 - The system must use a separate file system for the system audit data path - /etc/vfstabDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003640 - The root file system must employ journaling or another mechanism ensuring file system consistency.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003660 - The system must log authentication informational data.DISA STIG Solaris 10 X86 v2r4Unix

AUDIT AND ACCOUNTABILITY

GEN003745 - The inetd.conf file must not have extended ACLs.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003815 - The portmap or rpcbind service must not be installed unless needed.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003830 - The rlogind service must not be running.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN003835 - The rlogind service must not be installed.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003850 - The telnet daemon must not be running.DISA STIG Solaris 10 X86 v2r4Unix

IDENTIFICATION AND AUTHENTICATION

GEN003865 - Network analysis tools must not be installed.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003900 - The hosts.lpd file (or equivalent) must not contain a '+' character - Allow fromDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN003930 - The hosts.lpd (or equivalent) file must be group-owned by root, bin, or sys - /etc/apache/httpd-standalone-ipp.confDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN004600 - The SMTP service must be an up-to-date version.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN004680 - The SMTP service must not have the VRFY feature active.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN004710 - Mail relaying must be restricted - Postfix relay rejectDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN004710 - Mail relaying must be restricted - SendmailDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN004800 - Unencrypted FTP must not be used on the system.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN004880 - The ftpusers file must exist.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN004930 - The ftpusers file must be group-owned by root, bin, or sys.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN004980 - The FTP daemon must be configured for logging or verbose mode.DISA STIG Solaris 10 X86 v2r4Unix

AUDIT AND ACCOUNTABILITY

GEN005201 - X11 forwarding for SSH must be disabled.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005280 - The system must not have the UUCP service active.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005300 - SNMP communities, users, and passphrases must be changed from the default - /usr/sfw/lib/sma_snmp/snmpd.confDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005305 - The SNMP service must use only SNMPv3 or its successors - /etc/snmp/conf/snmpd.confDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005320 - The snmpd.conf file must have mode 0600 or less permissive - /usr/sfw/lib/sma_snmp/snmpd.confDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN005365 - The snmpd.conf file must be group-owned by root, sys, or bin - /etc/snmp/conf/snmpd.confDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005380 - If the system is a Network Management System (NMS) server, it must only run the NMS and any software required by the NMS.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005400 - The /etc/syslog.conf file must be owned by root.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005450 - The system must use a remote syslog server (log host).DISA STIG Solaris 10 X86 v2r4Unix

AUDIT AND ACCOUNTABILITY

GEN005506 - The SSH daemon must be configured to not use Cipher-Block Chaining (CBC) ciphers.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT