Solaris 10 X86 Security Technical Implementation Guide

The Solaris 10 X86 Security Technical Implementation Guide (V2 R4) has 513 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

513STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Thu Jan 26 2023

The asetenv file YPCHECK variable must be set to true when NIS+ is configured.

Solaris 10 X86 Security Technical Implementation Guide

Assessment Title

Rule Text

The asetenv file YPCHECK variable must be set to true when NIS+ is configured.

Description

Discussion Text

If YPCHECK is not set to true in asetenv, then ypfiles may not be checked.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-220071

Rule

SV-220071r603266_rule

Severity

medium

Rule Version

GEN000000-SOL00200

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Perform the following to determine if ASET is configured to check NIS+.

   #   grep YPCHECK /usr/aset/asetenv

If  NIS+ is running and the YPCHECK variable is set to false, then this is a finding.

Implementation Procedure

Fix Text

Edit the ASET configuration and set YPCHECK to true on systems running NIS. (If NIS+ is configured, YPCHECK must only be set to false to avoid going into NIS compatibility mode.) Configure NIS to use YPCHECK.

STIG check 2 of 513 in the Solaris 10 X86 STIG checklist

← Previous · V-220070The ASET master files must be located in the /usr/aset/masters directory.Next · V-220072 →The system must require authentication upon booting into single-user and maintenance modes.