Skip to content
ATO Pathways
  Log In

Solaris 11 SPARC Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Permissions on user .netrc files must be 750 or less permissive.

    <VulnDiscussion>.netrc files may contain unencrypted passwords that can be used to attack other systems.</VulnDiscussion><FalsePosit...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • System packages must be configured with the vendor-provided files, permissions, and ownerships.

    &lt;VulnDiscussion&gt;Failure to maintain system configurations may result in privilege escalation.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The finger daemon package must not be installed.

    &lt;VulnDiscussion&gt;Finger is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;...
    Rule Low Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The legacy remote network access utilities daemons must not be installed.

    &lt;VulnDiscussion&gt;Legacy remote access utilities allow remote control of a system without proper authentication.&lt;/VulnDiscussion&gt;&lt;Fals...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The NIS package must not be installed.

    &lt;VulnDiscussion&gt;NIS is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/Fa...
    Rule High Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The pidgin IM client package must not be installed.

    &lt;VulnDiscussion&gt;Instant messaging is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegati...
    Rule Low Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The FTP daemon must not be installed unless required.

    &lt;VulnDiscussion&gt;FTP is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/Fa...
    Rule High Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The TFTP service daemon must not be installed unless required.

    &lt;VulnDiscussion&gt;TFTP is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/F...
    Rule High Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The telnet service daemon must not be installed unless required.

    &lt;VulnDiscussion&gt;Telnet is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;...
    Rule High Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UUCP service daemon must not be installed unless required.

    &lt;VulnDiscussion&gt;UUCP is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/F...
    Rule Low Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules