Rotate your device back to portrait to use STIG Vault.
The Solaris 10 SPARC Security Technical Implementation Guide (V2 R4) has 507 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
Determine the type of zone that you are currently securing.
# zonename
If the zone is not the global zone, determine if any interfaces are exclusive to the zone:
# dladm show-link
If the output indicates "insufficient privileges" then this requirement is not applicable.
If the zone is the global zone or the non-global zone has exclusive interfaces determine the network settings.
Procedure:
# ndd /dev/tcp tcp_conn_req_max_q0
If the returned value is not 1280 or greater, this is a finding.
Procedure:
# ndd /dev/tcp tcp_conn_req_max_q
If the returned value is not 1024, this is a finding.
Procedure:
# ndd -set /dev/tcp tcp_conn_req_max_q0 1280
# ndd -set /dev/tcp tcp_conn_req_max_q 1024
Ensure these commands are also present in system startup scripts.