Solaris 10 SPARC Security Technical Implementation Guide

The Solaris 10 SPARC Security Technical Implementation Guide (V2 R4) has 507 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

507STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Thu Jan 26 2023

The snmpd.conf files must be owned by root.

Solaris 10 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

The snmpd.conf files must be owned by root.

Description

Discussion Text

The snmpd.conf files contain authenticators and must be protected from unauthorized access and modification. If the files are not owned by root, they may be subject to access and modification from unauthorized users.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-226974

Rule

SV-226974r603265_rule

Severity

medium

Rule Version

GEN005360

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine the owner of the SNMP configuration files. 

Procedure:

# ls -lL /etc/sma/snmp/snmpd.conf /etc/snmp/conf/snmpd.conf /var/sma_snmp/snmpd.conf /usr/sfw/lib/sma_snmp/snmpd.conf

If the snmpd.conf files are not owned by root, this is a finding.

Implementation Procedure

Fix Text

Change the owner of the snmpd.conf file to root.

Procedure:
# chown root <snmpd.conf file>

STIG check 399 of 507 in the Solaris 10 SPARC STIG checklist

← Previous · V-226973Management Information Base (MIB) files must not have extended ACLs.Next · V-226975 →The snmpd.conf file must be group-owned by root, sys, or bin.