Item Search

NameAudit NamePluginCategory
4.5 Configure Solaris Auditing - active audit policies = argv,cnt,zonenameCIS Solaris 11.1 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

4.5 Configure Solaris Auditing - active non-attributable flags = loCIS Solaris 11.1 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

4.5 Configure Solaris Auditing - audit_binfile attributes: p_minfree=1;CIS Solaris 11.1 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

DISA_STIG_Server_2012_and_2012_R2_DC_v3r7.audit from DISA Microsoft Windows Server 2012/2012 R2 Domain Controller v3r7 STIGDISA Windows Server 2012 and 2012 R2 DC STIG v3r7Windows
SOL-11.1-010100 - The audit records must provide data for all auditable events defined at the organizational level for the organization-defined information system components.DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010390 - The operating system must alert designated organizational officials in the event of an audit processing failure.DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-010440 - The operating system must protect audit information from unauthorized access.DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-020020 - The system must verify that package updates are digitally signed.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020030 - The operating system must protect audit tools from unauthorized access.DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-020100 - The legacy remote network access utilities daemons must not be installed.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020130 - The FTP daemon must not be installed unless required.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020160 - The UUCP service daemon must not be installed unless required.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020180 - The VNC server package must not be installed unless required.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020330 - Run control scripts library search paths must contain only authorized paths.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020340 - Run control scripts lists of preloaded libraries must contain only authorized paths.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020350 - Run control scripts must not execute world writable programs or scripts.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020380 - System start-up files must only execute programs owned by a privileged UID or an application.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020500 - Any X Windows host must write .Xauthority files.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-020530 - X displays must not be exported to the world.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

SOL-11.1-040040 - User passwords must be at least 15 characters in length.DISA Solaris 11 SPARC STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040070 - The system must require passwords to contain at least one uppercase alphabetic character.DISA Solaris 11 SPARC STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040100 - The system must require passwords to contain at least one special character.DISA Solaris 11 SPARC STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-040140 - The system must disable accounts after three consecutive unsuccessful login attempts.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-040260 - The default umask for FTP users must be 077.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040310 - Login services for serial ports must be disabled.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040315 - Access to a domain console via telnet must be restricted to the local host.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040316 - Access to a logical domain console must be restricted to authorized users.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040380 - The operating system must terminate the network connection associated with a communications session at the end of the session or after 10 minutes of inactivity.DISA Solaris 11 SPARC STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-040390 - Host-based authentication for login-based services must be disabled.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040400 - The use of FTP must be restricted.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040420 - Unauthorized use of the at or cron capabilities must not be permitted.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040480 - The operating system must not allow logins for users with blank passwords.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-040500 - The operating system must limit the number of concurrent sessions for each account to an organization-defined number of sessions.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-050010 - The system must disable directed broadcast packet forwarding.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050070 - The system must ignore ICMP redirect messages.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050110 - The system must set maximum number of half-open TCP connections to 4096.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050130 - The system must disable network routing unless required.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-050430 - The FTP service must display the DOD-approved system use notification message or banner before granting access to the system.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-050480 - Wireless network adapters must be disabled.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-060010 - The operating system must use mechanisms for authentication to a cryptographic module meeting the requirements of applicable federal laws, Executive orders, directives, policies, regulations, standards, and guidance for such authentication.DISA Solaris 11 SPARC STIG v3r6Unix

IDENTIFICATION AND AUTHENTICATION

SOL-11.1-060060 - The operating system must employ FIPS-validate or NSA-approved cryptography to implement digital signatures.DISA Solaris 11 SPARC STIG v3r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-070010 - The sticky bit must be set on all world writable directories.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070200 - The operating system must have no unowned files.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-070220 - The root account must be the only account with GID of 0.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080070 - The centralized process core dump data directory must have mode 0700 or less permissive.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-080130 - The system must require passwords to change the boot device settings. (SPARC)DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

SOL-11.1-090020 - The operating system must synchronize internal information system clocks with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).DISA Solaris 11 SPARC STIG v3r6Unix

AUDIT AND ACCOUNTABILITY

SOL-11.1-090120 - The operating system must prevent non-privileged users from circumventing malicious code protection capabilities.DISA Solaris 11 SPARC STIG v3r6Unix

ACCESS CONTROL

SOL-11.1-090270 - The operating system must identify potentially security-relevant error conditions.DISA Solaris 11 SPARC STIG v3r6Unix

SYSTEM AND INFORMATION INTEGRITY

SOL-11.1-120410 - The operating system must monitor for unauthorized connections of mobile devices to organizational information systems.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT