Item Search

NameAudit NamePluginCategory
OL09-00-006002 - OL 9 must configure a DNS processing mode set be Network Manager.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-006032 - OL 9 must not send Internet Control Message Protocol (ICMP) redirects.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-006033 - OL 9 must not allow interfaces to perform Internet Control Message Protocol (ICMP) redirects by default.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-006050 - OL 9 must be configured to use TCP syncookies.DISA Oracle Linux 9 STIG v1r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-010070 - The audit system records must be able to be used by a report generation capability.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010100 - The audit records must provide data for all auditable events defined at the organizational level for the organization-defined information system components.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010120 - The operating system must generate audit records for the selected list of auditable events as defined in DoD list of events.DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010130 - The operating system must support the capability to compile audit records from multiple components within the system into a system-wide (logical or physical) audit trail that is time-correlated to within organization-defined level of tolerance.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010140 - Audit records must include what type of events occurred.DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010250 - The audit system must be configured to audit account modification.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-010270 - The operating system must automatically audit account termination.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-010330 - The audit system must be configured to audit the loading and unloading of dynamic kernel modules.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010360 - The auditing system must not define a different auditing level for specific users.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-010380 - The audit system must alert the System Administrator (SA) if there is any type of audit failure.DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010410 - The operating system must configure auditing to reduce the likelihood of storage capacity being exceeded.DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-020010 - The System packages must be up to date with the most recent vendor updates and security fixes.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020120 - The pidgin IM client package must not be installed.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020190 - The operating system must employ automated mechanisms, per organization-defined frequency, to detect the addition of unauthorized components/devices into the operating system.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020230 - The operating system must employ automated mechanisms to prevent program execution in accordance with the organization-defined specifications.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020300 - All run control scripts must have mode 0755 or less permissive.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020310 - All run control scripts must have no extended ACLs.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020320 - Run control scripts executable search paths must contain only authorized paths.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020540 - .Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020560 - X Window System connections that are not required must be disabled.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-030010 - The graphical login service provides the capability of logging into the system using an X-Windows type interface from the console. If graphical login access for the console is required, the service must be in local-only mode.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-030060 - The operating system must disable information system functionality that provides the capability for automatic execution of code on mobile devices without user direction.DISA Solaris 11 SPARC STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-040060 - The system must require at least eight characters be changed between the old and new passwords during a password change.DISA Solaris 11 SPARC STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040080 - The operating system must enforce password complexity requiring that at least one lowercase character is used.DISA Solaris 11 SPARC STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040170 - The system must require users to re-authenticate to unlock a graphical desktop environment.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-040190 - The system must prevent the use of dictionary words for passwords.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040410 - The system must not allow autologin capabilities from the GNOME desktop.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050030 - The system must not respond to ICMP broadcast timestamp requests.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050050 - The system must not respond to broadcast ICMP echo requests.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050060 - The system must not respond to multicast echo requests.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050090 - The system must disable ICMP redirect messages.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050380 - The operating system must display the DOD-approved system use notification message or banner before granting access to the system for general system logons.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-050410 - The GNOME service must display the DOD-approved system use notification message or banner before granting access to the system.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-070020 - Permissions on user home directories must be 750 or less permissive.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070050 - There must be no user .rhosts files.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070090 - All home directories must be owned by the respective user assigned to it in /etc/passwd.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070170 - The system must not allow users to configure .forward files.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070180 - World-writable files must not exist.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070210 - The operating system must have no files with extended attributes.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070260 - The operator must document all file system objects that have non-standard access control list settings.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080040 - Process core dumps must be disabled unless needed.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080090 - The kernel core dump data directory must be owned by root.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090050 - The operating system must conduct backups of user-level information contained in the operating system per organization-defined frequency to conduct backups consistent with recovery time and recovery point objectives.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090130 - The operating system must employ malicious code protection mechanisms at workstations, servers, or mobile computing devices on the network to detect and eradicate malicious code transported by electronic mail, electronic mail attachments, web accesses, removable media, or other common means.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090220 - The operating system must back up audit records at least every seven days onto a different system or system component than the system or component being audited.DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-100010 - The /etc/zones directory, and its contents, must have the vendor default owner, group, and permissions.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT