Skip to content
ATO Pathways
  Log In

Solaris 11 X86 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The system must disable accounts after three consecutive unsuccessful login attempts.

    <VulnDiscussion>Allowing continued access to accounts on the system exposes them to brute-force password-guessing attacks.</VulnDiscussion...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000021

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000003

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • Login must not be permitted with empty/null passwords for SSH.

    &lt;VulnDiscussion&gt;Permitting login without a password is inherently risky.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&...
    Rule High Severity
    Show

  • SRG-OS-000163

    <GroupDescription></GroupDescription>
    Group
    Show

  • Permissions on user .netrc files must be 750 or less permissive.

    &lt;VulnDiscussion&gt;.netrc files may contain unencrypted passwords that can be used to attack other systems.&lt;/VulnDiscussion&gt;&lt;FalsePosit...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The operating system must ensure unauthorized, security-relevant configuration changes detected are tracked.

    &lt;VulnDiscussion&gt;Without auditing, malicious activity cannot be detected.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The legacy remote network access utilities daemons must not be installed.

    &lt;VulnDiscussion&gt;Legacy remote access utilities allow remote control of a system without proper authentication.&lt;/VulnDiscussion&gt;&lt;Fals...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The NIS package must not be installed.

    &lt;VulnDiscussion&gt;NIS is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/Fa...
    Rule High Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The pidgin IM client package must not be installed.

    &lt;VulnDiscussion&gt;Instant messaging is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegati...
    Rule Low Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules