Solaris 11 X86 Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The system must require authentication before allowing modification of the boot devices or menus. Secure the GRUB Menu (Intel).
<VulnDiscussion>The flexibility that GRUB provides creates a security risk if its configuration is modified by an unauthorized user. The fail...Rule Low Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
The operating system must implement transaction recovery for transaction-based systems.
<VulnDiscussion>Recovery and reconstitution constitutes executing an operating system contingency plan comprised of activities to restore ess...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
SNMP communities, users, and passphrases must be changed from the default.
<VulnDiscussion>Whether active or not, default SNMP passwords, users, and passphrases must be changed to maintain security. If the service is...Rule High Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
A file integrity baseline must be created, maintained, and reviewed at least weekly to determine if unauthorized changes have been made to important system files located in the root file system.
<VulnDiscussion>A file integrity baseline is a collection of file metadata used to evaluate the integrity of the system. A minimal baseline m...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
Direct logins must not be permitted to shared, default, application, or utility accounts.
<VulnDiscussion>Shared accounts (accounts where two or more people log in with the same user identification) do not provide identification an...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
The operating system must conduct backups of user-level information contained in the operating system per organization-defined frequency to conduct backups consistent with recovery time and recovery point objectives.
<VulnDiscussion>Operating system backup is a critical step in maintaining data assurance and availability. User-level information is data g...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
The operating system must conduct backups of system-level information contained in the information system per organization-defined frequency to conduct backups that are consistent with recovery time and recovery point objectives.
<VulnDiscussion>Operating system backup is a critical step in maintaining data assurance and availability. System-level information is data...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
The operating system must conduct backups of operating system documentation including security-related documentation per organization-defined frequency to conduct backups that is consistent with recovery time and recovery point objectives.
<VulnDiscussion>Operating system backup is a critical step in maintaining data assurance and availability. System documentation is data gen...Rule Medium Severity -
SRG-OS-000181
<GroupDescription></GroupDescription>Group -
The operating system must prevent the execution of prohibited mobile code.
<VulnDiscussion>Decisions regarding the employment of mobile code within operating systems are based on the potential for the code to cause d...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
The operating system must employ PKI solutions at workstations, servers, or mobile computing devices on the network to create, manage, distribute, use, store, and revoke digital certificates.
<VulnDiscussion>Without the use of PKI systems to manage digital certificates, the operating system or other system components may be unable ...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.