Skip to content

Solaris 11 SPARC Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The audit system must be configured to audit file deletions.

    <VulnDiscussion>Without auditing, malicious activity cannot be detected.</VulnDiscussion><FalsePositives></FalsePositives>&...
    Rule Medium Severity
  • SRG-OS-000004

    <GroupDescription></GroupDescription>
    Group
  • The operating system must protect audit tools from unauthorized access.

    &lt;VulnDiscussion&gt;Failure to maintain system configurations may result in privilege escalation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt...
    Rule Medium Severity
  • SRG-OS-000257

    <GroupDescription></GroupDescription>
    Group
  • The operating system must protect against an individual falsely denying having performed a particular action. In order to do so the system must be configured to send audit records to a remote audit server.

    &lt;VulnDiscussion&gt;Keeping audit records on a remote system reduces the likelihood of audit records being changed or corrupted. Duplicating and ...
    Rule Low Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules