| SOL-11.1-010120 - The operating system must generate audit records for the selected list of auditable events as defined in DoD list of events. | DISA Solaris 11 X86 STIG v3r6 | Unix | AUDIT AND ACCOUNTABILITY |
| SOL-11.1-010150 - Audit records must include when (date and time) the events occurred. | DISA Solaris 11 X86 STIG v3r6 | Unix | AUDIT AND ACCOUNTABILITY |
| SOL-11.1-010260 - The operating system must automatically audit account disabling actions. | DISA Solaris 11 X86 STIG v3r6 | Unix | ACCESS CONTROL |
| SOL-11.1-010290 - The operating system must ensure unauthorized, security-relevant configuration changes detected are tracked. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-010300 - The audit system must be configured to audit all administrative, privileged, and security actions. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-010400 - The operating system must allocate audit record storage capacity. | DISA Solaris 11 X86 STIG v3r6 | Unix | AUDIT AND ACCOUNTABILITY |
| SOL-11.1-010410 - The operating system must configure auditing to reduce the likelihood of storage capacity being exceeded. | DISA Solaris 11 X86 STIG v3r6 | Unix | AUDIT AND ACCOUNTABILITY |
| SOL-11.1-020100 - The legacy remote network access utilities daemons must not be installed. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-020110 - The NIS package must not be installed. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-020120 - The pidgin IM client package must not be installed. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-020520 - The .Xauthority files must not have extended ACLs. | DISA Solaris 11 X86 STIG v3r6 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| SOL-11.1-020530 - X displays must not be exported to the world. | DISA Solaris 11 X86 STIG v3r6 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| SOL-11.1-040060 - The system must require at least eight characters be changed between the old and new passwords during a password change. | DISA Solaris 11 X86 STIG v3r6 | Unix | IDENTIFICATION AND AUTHENTICATION |
| SOL-11.1-040070 - The system must require passwords to contain at least one uppercase alphabetic character. | DISA Solaris 11 X86 STIG v3r6 | Unix | IDENTIFICATION AND AUTHENTICATION |
| SOL-11.1-040090 - The system must require passwords to contain at least one numeric character. | DISA Solaris 11 X86 STIG v3r6 | Unix | IDENTIFICATION AND AUTHENTICATION |
| SOL-11.1-040180 - Graphical desktop environments provided by the system must automatically lock after 15 minutes of inactivity. | DISA Solaris 11 SPARC STIG v3r6 | Unix | ACCESS CONTROL |
| SOL-11.1-040230 - The operating system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator. | DISA Solaris 11 X86 STIG v3r6 | Unix | IDENTIFICATION AND AUTHENTICATION |
| SOL-11.1-040250 - The default umask for system and users must be 077. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040270 - The value mesg n must be configured as the default setting for all users. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040270 - The value mesg n must be configured as the default setting for all users. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040360 - Direct root account login must not be permitted for SSH access. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040370 - Login must not be permitted with empty/null passwords for SSH. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040380 - The operating system must terminate the network connection associated with a communications session at the end of the session or after 10 minutes of inactivity. | DISA Solaris 11 SPARC STIG v3r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| SOL-11.1-040390 - Host-based authentication for login-based services must be disabled. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040400 - The use of FTP must be restricted. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040400 - The use of FTP must be restricted. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040410 - The system must not allow autologin capabilities from the GNOME desktop. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040420 - Unauthorized use of the at or cron capabilities must not be permitted. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040500 - The operating system must limit the number of concurrent sessions for each account to an organization-defined number of sessions. | DISA Solaris 11 X86 STIG v3r6 | Unix | ACCESS CONTROL |
| SOL-11.1-050090 - The system must disable ICMP redirect messages. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-050110 - The system must set maximum number of half-open TCP connections to 4096. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-050130 - The system must disable network routing unless required. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-050140 - The system must implement TCP Wrappers. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-050430 - The FTP service must display the DOD-approved system use notification message or banner before granting access to the system. | DISA Solaris 11 SPARC STIG v3r6 | Unix | ACCESS CONTROL |
| SOL-11.1-050470 - The operating system must prevent internal users from sending out packets which attempt to manipulate or spoof invalid IP addresses. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-050480 - Wireless network adapters must be disabled. | DISA Solaris 11 SPARC STIG v3r6 | Unix | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| SOL-11.1-060010 - The operating system must use mechanisms for authentication to a cryptographic module meeting the requirements of applicable federal laws, Executive orders, directives, policies, regulations, standards, and guidance for such authentication. | DISA Solaris 11 SPARC STIG v3r6 | Unix | IDENTIFICATION AND AUTHENTICATION |
| SOL-11.1-060010 - The operating system must use mechanisms for authentication to a cryptographic module meeting the requirements of applicable federal laws, Executive orders, directives, policies, regulations, standards, and guidance for such authentication. | DISA Solaris 11 X86 STIG v3r6 | Unix | IDENTIFICATION AND AUTHENTICATION |
| SOL-11.1-060060 - The operating system must employ FIPS-validate or NSA-approved cryptography to implement digital signatures. | DISA Solaris 11 SPARC STIG v3r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| SOL-11.1-070010 - The sticky bit must be set on all world writable directories. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-070200 - The operating system must have no unowned files. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-070220 - The root account must be the only account with GID of 0. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-070250 - The operating system must protect the audit records resulting from non-local accesses to privileged accounts and the execution of privileged functions. | DISA Solaris 11 SPARC STIG v3r6 | Unix | ACCESS CONTROL |
| SOL-11.1-080070 - The centralized process core dump data directory must have mode 0700 or less permissive. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-080100 - The kernel core dump data directory must be group-owned by root. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-080130 - The system must require passwords to change the boot device settings. (SPARC) | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-090020 - The operating system must synchronize internal information system clocks with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS). | DISA Solaris 11 SPARC STIG v3r6 | Unix | AUDIT AND ACCOUNTABILITY |
| SOL-11.1-090120 - The operating system must prevent non-privileged users from circumventing malicious code protection capabilities. | DISA Solaris 11 SPARC STIG v3r6 | Unix | ACCESS CONTROL |
| SOL-11.1-090270 - The operating system must identify potentially security-relevant error conditions. | DISA Solaris 11 SPARC STIG v3r6 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| SOL-11.1-120410 - The operating system must monitor for unauthorized connections of mobile devices to organizational information systems. | DISA Solaris 11 SPARC STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
