Solaris 10 SPARC Security Technical Implementation Guide

The Solaris 10 SPARC Security Technical Implementation Guide (V2 R4) has 507 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

507STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Thu Jan 26 2023

The physical devices must not be assigned to non-global zones.

Solaris 10 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

The physical devices must not be assigned to non-global zones.

Description

Discussion Text

Solaris non-global zones can be assigned physical hardware devices. This increases the risk of such a non-global zone having the capability to compromise the global zone.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-226429

Rule

SV-226429r603265_rule

Severity

medium

Rule Version

GEN000000-SOL00660

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If the system is not a global zone, this vulnerability is not applicable.
List the non-global zones on the system.
# zoneadm list -vi
List the configuration for each zone.
# zonecfg -z <zone> info
Check for device lines.  If such a line exists, this is a finding.

Implementation Procedure

Fix Text

Remove all device assignments from the non-global zone.
# zonecfg -z <zone> remove device <device>

STIG check 75 of 507 in the Solaris 10 SPARC STIG checklist

← Previous · V-226428The limitpriv zone option must be set to the vendor default or less permissive.Next · V-226430 →The operating system must be a supported release.