Solaris 10 SPARC Security Technical Implementation Guide

The Solaris 10 SPARC Security Technical Implementation Guide (V2 R4) has 507 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

507STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Thu Jan 26 2023

The SSH daemon must be configured to only use Message Authentication Codes (MACs) employing FIPS 140-2 approved cryptographic hash algorithms.

Solaris 10 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

The SSH daemon must be configured to only use Message Authentication Codes (MACs) employing FIPS 140-2 approved cryptographic hash algorithms.

Description

Discussion Text

DoD information systems are required to use FIPS 140-2 approved cryptographic hash functions.

Satisfies: SRG-OS-000250, SRG-OS-000495, SRG-OS-000500

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-226988

Rule

SV-226988r603265_rule

Severity

medium

Rule Version

GEN005507

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the SSH daemon configuration for allowed MACs.

Procedure:
# grep -i macs /etc/ssh/sshd_config | grep -v '^#' 

If no lines are returned, or the returned MACs list contains any MAC that is not hmac-sha1 or a better hmac algorithm that is on the FIPS 140-2 approved list, this is a finding.

Implementation Procedure

Fix Text

Edit the SSH daemon configuration and remove any MACs that are not hmac-sha1 or a better hmac algorithm that is on the FIPS 140-2 approved list. If necessary, add a MACs line.

STIG check 413 of 507 in the Solaris 10 SPARC STIG checklist

← Previous · V-226987The SSH daemon must be configured to not use Cipher-Block Chaining (CBC) ciphers.Next · V-226989 →The SSH client must be configured to only use FIPS 140-2 approved ciphers.