The systems physical devices must not be assigned to non-global zones.
An XCCDF Rule
Description
Solaris non-global zones can be assigned physical hardware devices. This increases the risk of such a non-global zone having the capability to compromise the global zone.
- ID
- SV-216476r959010_rule
- Version
- SOL-11.1-100030
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
This check applies to the global zone only. Determine the zone that you are currently securing.
# zonename
If the command output is "global", this check applies.