Skip to content

Solaris 11 X86 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
  • Generic Security Services (GSS) must be disabled.

    &lt;VulnDiscussion&gt;This service should be disabled if it is not required.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt...
    Rule Low Severity
  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
  • Systems services that are not required must be disabled.

    &lt;VulnDiscussion&gt;Services that are enabled but not required by the mission may provide excessive access or additional attack vectors to penetr...
    Rule Low Severity
  • TCP Wrappers must be enabled and configured per site policy to only allow access by approved hosts and services.

    &lt;VulnDiscussion&gt;TCP Wrappers are a host-based access control system that allows administrators to control who has access to various network s...
    Rule Medium Severity
  • SRG-OS-000076

    <GroupDescription></GroupDescription>
    Group
  • User passwords must be changed at least every 60 days.

    &lt;VulnDiscussion&gt;Limiting the lifespan of authenticators limits the period of time an unauthorized user has access to the system while using c...
    Rule Medium Severity
  • SRG-OS-000002

    <GroupDescription></GroupDescription>
    Group
  • The operating system must automatically terminate temporary accounts within 72 hours.

    &lt;VulnDiscussion&gt;If temporary user accounts remain active when no longer needed or for an excessive period, these accounts may be used to gain...
    Rule Low Severity
  • SRG-OS-000075

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules