Item Search

NameAudit NamePluginCategory
SOL-11.1-010060 - The audit system must support an audit reduction capability.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010170 - Audit records must include the sources of the events that occurred.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010320 - The audit system must be configured to audit all discretionary access control permission modifications.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010340 - The audit system must be configured to audit failed attempts to access files and programs.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-010370 - The audit system must alert the SA when the audit storage volume approaches its capacity.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010390 - The operating system must alert designated organizational officials in the event of an audit processing failure.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010440 - The operating system must protect audit information from unauthorized access.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-020020 - The system must verify that package updates are digitally signed.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020340 - Run control scripts lists of preloaded libraries must contain only authorized paths.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020350 - Run control scripts must not execute world writable programs or scripts.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020360 - All system start-up files must be owned by root.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020370 - All system start-up files must be group-owned by root, sys, or bin.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020540 - .Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-030060 - The operating system must disable information system functionality that provides the capability for automatic execution of code on mobile devices without user direction.DISA Solaris 11 X86 STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-040010 - User passwords must be changed at least every 60 days.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040020 - The operating system must automatically terminate temporary accounts within 72 hours.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-040030 - The operating system must enforce minimum password lifetime restrictions.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040080 - The operating system must enforce password complexity requiring that at least one lowercase character is used.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040100 - The system must require passwords to contain at least one special character.DISA Solaris 11 X86 STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040120 - The system must not have accounts configured with blank or null passwords.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040250 - The default umask for system and users must be 077.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040320 - The nobody access for RPC encryption key storage service must be disabled.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040370 - Login must not be permitted with empty/null passwords for SSH.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050020 - The system must not respond to ICMP timestamp requests.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050030 - The system must not respond to ICMP broadcast timestamp requests.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050040 - The system must not respond to ICMP broadcast netmask requests.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050370 - The system must prevent local applications from generating source-routed packets.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050460 - The operating system must terminate all sessions and network connections when nonlocal maintenance is completed.DISA Solaris 11 X86 STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-060100 - The operating system must protect the confidentiality of transmitted information.DISA Solaris 11 X86 STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-060120 - The operating system must maintain the confidentiality of information during aggregation, packaging, and transformation in preparation for transmission.DISA Solaris 11 X86 STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-060180 - The operating system must use cryptographic mechanisms to protect the integrity of audit information.DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-070020 - Permissions on user home directories must be 750 or less permissive.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070030 - Permissions on user . (hidden) files must be 750 or less permissive.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070040 - Permissions on user .netrc files must be 750 or less permissive.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070120 - Duplicate Group IDs (GIDs) must not exist for multiple groups.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070170 - The system must not allow users to configure .forward files.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070220 - The root account must be the only account with GID of 0.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070250 - The operating system must protect the audit records resulting from non-local accesses to privileged accounts and the execution of privileged functions.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-070260 - The operator must document all file system objects that have non-standard access control list settings.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080060 - The centralized process core dump data directory must be group-owned by root, bin, or sys.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080070 - The centralized process core dump data directory must have mode 0700 or less permissive.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080110 - The kernel core dump data directory must have mode 0700 or less permissive.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080140 - The system must require authentication before allowing modification of the boot devices or menus. Secure the GRUB Menu (Intel).DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090010 - A file integrity baseline must be created, maintained, and reviewed at least weekly to determine if unauthorized changes have been made to important system files located in the root file system.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090020 - The operating system must synchronize internal information system clocks with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).DISA Solaris 11 X86 STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-090050 - The operating system must conduct backups of user-level information contained in the operating system per organization-defined frequency to conduct backups consistent with recovery time and recovery point objectives.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090120 - The operating system must prevent non-privileged users from circumventing malicious code protection capabilities.DISA Solaris 11 X86 STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-090250 - The operating system must verify the correct operation of security functions in accordance with organization-defined conditions and in accordance with organization-defined frequency (if periodic verification).DISA Solaris 11 X86 STIG v3r6Unix

SYSTEM AND INFORMATION INTEGRITY

SOL-11.1-090270 - The operating system must identify potentially security-relevant error conditions.DISA Solaris 11 X86 STIG v3r6Unix

SYSTEM AND INFORMATION INTEGRITY

SOL-11.1-100040 - The audit system must identify in which zone an event occurred.DISA Solaris 11 X86 STIG v3r6Unix

CONFIGURATION MANAGEMENT