Skip to content

Solaris 11 X86 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000062

    Group
  • SRG-OS-000064

    Group
  • The operating system must generate audit records for the selected list of auditable events as defined in DoD list of events.

    Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to an individual account. Without accurate time stamps, source, user, and ...
    Rule Medium Severity
  • SRG-OS-000037

    Group
  • Audit records must include what type of events occurred.

    Without proper system auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to an individual account.
    Rule Medium Severity
  • SRG-OS-000038

    Group
  • Audit records must include when (date and time) the events occurred.

    Without accurate time stamps malicious activity cannot be accurately tracked.
    Rule Medium Severity
  • SRG-OS-000039

    Group
  • Audit records must include where the events occurred.

    Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to an individual account. Without accurate time stamps, source, user, and ...
    Rule Medium Severity
  • SRG-OS-000040

    Group
  • Audit records must include the sources of the events that occurred.

    Without accurate source information malicious activity cannot be accurately tracked.
    Rule Medium Severity
  • SRG-OS-000041

    Group
  • Audit records must include the outcome (success or failure) of the events that occurred.

    Tracking both the successful and unsuccessful attempts aids in identifying threats to the system.
    Rule Medium Severity
  • SRG-OS-000480

    Group
  • SRG-OS-000004

    Group
  • The audit system must be configured to audit account creation.

    Without auditing, malicious activity cannot be detected.
    Rule Medium Severity
  • SRG-OS-000239

    Group
  • The audit system must be configured to audit account modification.

    Without auditing, malicious activity cannot be detected.
    Rule Medium Severity
  • SRG-OS-000240

    Group
  • The operating system must automatically audit account disabling actions.

    Without auditing, malicious activity cannot be detected.
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules