Item Search

NameAudit NamePluginCategory
SOL-11.1-010120 - The operating system must generate audit records for the selected list of auditable events as defined in DoD list of events.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010150 - Audit records must include when (date and time) the events occurred.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010260 - The operating system must automatically audit account disabling actions.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-010290 - The operating system must ensure unauthorized, security-relevant configuration changes detected are tracked.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-010300 - The audit system must be configured to audit all administrative, privileged, and security actions.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-010400 - The operating system must allocate audit record storage capacity.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010410 - The operating system must configure auditing to reduce the likelihood of storage capacity being exceeded.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-020100 - The legacy remote network access utilities daemons must not be installed.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020110 - The NIS package must not be installed.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020120 - The pidgin IM client package must not be installed.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020520 - The .Xauthority files must not have extended ACLs.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

SOL-11.1-020530 - X displays must not be exported to the world.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

SOL-11.1-040060 - The system must require at least eight characters be changed between the old and new passwords during a password change.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040070 - The system must require passwords to contain at least one uppercase alphabetic character.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040090 - The system must require passwords to contain at least one numeric character.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040230 - The operating system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040270 - The value mesg n must be configured as the default setting for all users.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040280 - User accounts must be locked after 35 days of inactivity.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040331 - The sshd server must bind the X11 forwarding server to the loopback address.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040350 - The rhost-based authentication for SSH must be disabled.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040360 - Direct root account login must not be permitted for SSH access.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040390 - Host-based authentication for login-based services must be disabled.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040400 - The use of FTP must be restricted.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040410 - The system must not allow autologin capabilities from the GNOME desktop.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040430 - Logins to the root account must be restricted to the system console only.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040460 - The operating system must provide the capability for users to directly initiate session lock mechanisms.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-040470 - The operating system session lock mechanism, when activated on a device with a display screen, must place a publicly viewable pattern onto the associated display, hiding what was previously visible on the screen.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-040500 - The operating system must limit the number of concurrent sessions for each account to an organization-defined number of sessions.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-050060 - The system must not respond to multicast echo requests.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050080 - The system must set strict multihoming.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050090 - The system must disable ICMP redirect messages.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050120 - The system must set maximum number of incoming connections to 1024.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050140 - The system must implement TCP Wrappers.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050380 - The operating system must display the DOD-approved system use notification message or banner before granting access to the system for general system logons.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-050390 - The operating system must display the DOD-approved system use notification message or banner for SSH connections.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-050470 - The operating system must prevent internal users from sending out packets which attempt to manipulate or spoof invalid IP addresses.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-060010 - The operating system must use mechanisms for authentication to a cryptographic module meeting the requirements of applicable federal laws, Executive orders, directives, policies, regulations, standards, and guidance for such authentication.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-060080 - The operating system must employ cryptographic mechanisms to recognize changes to information during transmission unless otherwise protected by alternative physical measures.DISA Solaris 11 X86 STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-060130 - The operating system must implement DoD-approved encryption to protect the confidentiality of remote access sessions.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-060190 - The operating system must protect the integrity of transmitted information.DISA Solaris 11 X86 STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-070010 - The sticky bit must be set on all world writable directories.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070050 - There must be no user .rhosts files.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070080 - All user accounts must be configured to use a home directory that exists.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070100 - Duplicate User IDs (UIDs) must not exist for users within the organization.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-070110 - Duplicate UIDs must not exist for multiple non-organizational users.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-070180 - World-writable files must not exist.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080040 - Process core dumps must be disabled unless needed.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080160 - SNMP default community strings and passphrases must be changed from vendor defaults.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090030 - Direct logins must not be permitted to shared, default, application, or utility accounts.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090070 - The operating system must conduct backups of operating system documentation including security-related documentation per organization-defined frequency to conduct backups that is consistent with recovery time and recovery point objectives.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT