Solaris 10 SPARC Security Technical Implementation Guide

The Solaris 10 SPARC Security Technical Implementation Guide (V2 R4) has 507 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

507STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Thu Jan 26 2023

The /etc/zones directory, and its contents, must not be group- or world-writable.

Solaris 10 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

The /etc/zones directory, and its contents, must not be group- or world-writable.

Description

Discussion Text

Solaris zones configuration files must be protected against illicit creation, modification, and deletion.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-226425

Rule

SV-226425r603265_rule

Severity

medium

Rule Version

GEN000000-SOL00580

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the permissions of the files and directories.

# ls -lLdR /etc/zones

If the mode of a directory is more permissive than 0755, or the mode of a file more permissive than 0644, this is a finding.

If zones are not installed on the system, this is not a finding.

Implementation Procedure

Fix Text

Change the mode of the file or directory.

# chmod 0644 <file>
For directories:
# chmod 0755 <directory>

STIG check 71 of 507 in the Solaris 10 SPARC STIG checklist

← Previous · V-226424The /etc/zones directory, and its contents, must be group-owned by root, sys, or bin.Next · V-226426 →The /etc/zones directory, and its contents, must not have an extended ACL.