Solaris 10 SPARC Security Technical Implementation Guide

The Solaris 10 SPARC Security Technical Implementation Guide (V2 R4) has 507 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

507STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Thu Jan 26 2023

The .rhosts, .shosts, hosts.equiv, shosts.equiv, /etc/passwd, /etc/shadow, and/or /etc/group files must not contain a plus (+) without defining entries for NIS+ netgroups.

Solaris 10 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

The .rhosts, .shosts, hosts.equiv, shosts.equiv, /etc/passwd, /etc/shadow, and/or /etc/group files must not contain a plus (+) without defining entries for NIS+ netgroups.

Description

Discussion Text

A plus (+) in system accounts' files causes the system to lookup the specified entry using NIS. If the system is not using NIS, no such entries should exist.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-226560

Rule

SV-226560r603265_rule

Severity

medium

Rule Version

GEN001980

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check system configuration files for plus (+) entries.

Procedure:
# find / -name .rhosts -exec grep + {} \;

# find / -name .shosts -exec grep + {} \;

# find / -name hosts.equiv -exec grep + {} \;

# find / -name shosts.equiv -exec grep + {} \;


# grep + /etc/passwd
# grep + /etc/shadow
# grep + /etc/group

If the .rhosts, .shosts, hosts.equiv, shosts.equiv, /etc/passwd, /etc/shadow, and/or /etc/group files contain a plus (+) and do not define entries for NIS+ netgroups, this is a finding.

Implementation Procedure

Fix Text

Edit the .rhosts, .shosts, hosts.equiv, shosts.equiv, /etc/passwd, /etc/shadow, and/or /etc/group files and remove entries containing a plus (+).

STIG check 206 of 507 in the Solaris 10 SPARC STIG checklist

← Previous · V-226559User start-up files must not execute world-writable programs.Next · V-226561 →There must be no .netrc files on the system.