Item Search

NameAudit NamePluginCategory
SOL-11.1-010080 - The operating system must provide the capability to automatically process audit records for events of interest based upon selectable, event criteria.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010180 - Audit records must include the outcome (success or failure) of the events that occurred.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010230 - The audit system must be configured to audit account creation.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-020090 - The finger daemon package must not be installed.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020150 - The telnet service daemon must not be installed unless required.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020160 - The UUCP service daemon must not be installed unless required.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020170 - The rpcbind service must be configured for local only services unless organizationally defined.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020180 - The VNC server package must not be installed unless required.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020230 - The operating system must employ automated mechanisms to prevent program execution in accordance with the organization-defined specifications.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020320 - Run control scripts executable search paths must contain only authorized paths.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020380 - System start-up files must only execute programs owned by a privileged UID or an application.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020500 - Any X Windows host must write .Xauthority files.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020550 - The .Xauthority utility must only permit access to authorized hosts.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

SOL-11.1-030040 - Systems services that are not required must be disabled.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040110 - The system must require passwords to contain no more than three consecutive repeating characters.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040170 - The system must require users to re-authenticate to unlock a graphical desktop environment.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-040180 - Graphical desktop environments provided by the system must automatically lock after 15 minutes of inactivity.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-040190 - The system must prevent the use of dictionary words for passwords.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040280 - User accounts must be locked after 35 days of inactivity.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040331 - The sshd server must bind the X11 forwarding server to the loopback address.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040350 - The rhost-based authentication for SSH must be disabled.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040360 - Direct root account login must not be permitted for SSH access.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040390 - Host-based authentication for login-based services must be disabled.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040430 - Logins to the root account must be restricted to the system console only.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040460 - The operating system must provide the capability for users to directly initiate session lock mechanisms.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-040470 - The operating system session lock mechanism, when activated on a device with a display screen, must place a publicly viewable pattern onto the associated display, hiding what was previously visible on the screen.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-050060 - The system must not respond to multicast echo requests.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050390 - The operating system must display the DoD approved system use notification message or banner for SSH connections.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-060080 - The operating system must employ cryptographic mechanisms to recognize changes to information during transmission unless otherwise protected by alternative physical measures.DISA Solaris 11 SPARC STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-060090 - The operating system must maintain the integrity of information during aggregation, packaging, and transformation in preparation for transmission.DISA Solaris 11 SPARC STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-060130 - The operating system must implement DoD-approved encryption to protect the confidentiality of remote access sessions.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-060140 - The operating system must use cryptographic mechanisms to protect and restrict access to information on portable digital media.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-060180 - The operating system must use cryptographic mechanisms to protect the integrity of audit information.DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-070030 - Permissions on user . (hidden) files must be 750 or less permissive.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070070 - Users must have a valid home directory assignment.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070080 - All user accounts must be configured to use a home directory that exists.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070120 - Duplicate Group IDs (GIDs) must not exist for multiple groups.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070240 - The operating system must reveal error messages only to authorized personnel.DISA Solaris 11 SPARC STIG v3r6Unix

SYSTEM AND INFORMATION INTEGRITY

SOL-11.1-080020 - The system must implement non-executable program stacks.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080050 - The centralized process core dump data directory must be owned by root.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080110 - The kernel core dump data directory must have mode 0700 or less permissive.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080150 - The operating system must implement transaction recovery for transaction-based systems.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090060 - The operating system must conduct backups of system-level information contained in the information system per organization-defined frequency to conduct backups that are consistent with recovery time and recovery point objectives.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090070 - The operating system must conduct backups of operating system documentation including security-related documentation per organization-defined frequency to conduct backups that is consistent with recovery time and recovery point objectives.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090100 - The operating system must prevent the execution of prohibited mobile code.DISA Solaris 11 SPARC STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-090115 - The operating system must employ PKI solutions at workstations, servers, or mobile computing devices on the network to create, manage, distribute, use, store, and revoke digital certificates.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-100020 - The limitpriv zone option must be set to the vendor default or less permissive.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-100030 - The systems physical devices must not be assigned to non-global zones.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-100040 - The audit system must identify in which zone an event occurred.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-100050 - The audit system must maintain a central audit trail for all zones.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT