Skip to content

Solaris 11 SPARC Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • All system start-up files must be owned by root.

    <VulnDiscussion>System start-up files not owned by root could lead to system compromise by allowing malicious users or applications to modify...
    Rule Medium Severity
  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
  • All system start-up files must be group-owned by root, sys, or bin.

    &lt;VulnDiscussion&gt;If system start-up files do not have a group owner of root or a system group, the files may be modified by malicious users or...
    Rule Medium Severity
  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
  • System start-up files must only execute programs owned by a privileged UID or an application.

    &lt;VulnDiscussion&gt;System start-up files executing programs owned by other than root (or another privileged user) or an application indicates th...
    Rule Medium Severity
  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
  • Any X Windows host must write .Xauthority files.

    &lt;VulnDiscussion&gt;.Xauthority files ensure the user is authorized to access the specific X Windows host. If .Xauthority files are not used, it ...
    Rule Medium Severity
  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
  • The system must require passwords to contain no more than three consecutive repeating characters.

    &lt;VulnDiscussion&gt;Complex passwords can reduce the likelihood of success of automated password-guessing attacks.&lt;/VulnDiscussion&gt;&lt;Fals...
    Rule Low Severity
  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules