Solaris 10 X86 Security Technical Implementation Guide

The Solaris 10 X86 Security Technical Implementation Guide (V2 R4) has 513 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

513STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Thu Jan 26 2023

If the system is a firewall, ASET must be used on the system, and the firewall parameters must be set in /usr/aset/asetenv.

Solaris 10 X86 Security Technical Implementation Guide

Assessment Title

Rule Text

If the system is a firewall, ASET must be used on the system, and the firewall parameters must be set in /usr/aset/asetenv.

Description

Discussion Text

ASET will not perform firewall tasks if it is not listed as a parameter in /usr/aset/asetenv.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-227539

Rule

SV-227539r603266_rule

Severity

medium

Rule Version

GEN000000-SOL00160

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Perform the following to determine if ASET is being used.

   # crontab -l |grep aset

A returned entry would indicate ASET is being utilized.  Determine if ASET is configured to check firewall settings.

   # grep TASKS /usr/aset/asetenv | grep firewall

If an entry is not returned, this is a finding.

Implementation Procedure

Fix Text

If the system is used as a firewall and ASET is used, ensure the firewall parameter is configured in /usr/aset/asetenv.

STIG check 62 of 513 in the Solaris 10 X86 STIG checklist

← Previous · V-227538The /usr/aset/masters/uid_aliases must be empty.Next · V-227540 →The Solaris system Automated Security Enhancement Tool (ASET) configurable parameters in the asetenv file must be correct.