Solaris 11 SPARC Security Technical Implementation Guide

The Solaris 11 SPARC Security Technical Implementation Guide (V3 R7) has 215 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

215STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

The VNC server package must not be installed unless required.

Solaris 11 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

The VNC server package must not be installed unless required.

Description

Discussion Text

The VNC service uses weak authentication capabilities and provides the user complete graphical system access.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-216295

Rule

SV-216295r959010_rule

Severity

medium

Rule Version

SOL-11.1-020180

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine if the VNC server package is installed.

# pkg list x11/server/xvnc

If an installed package named "x11/server/xvnc is listed" is listed, this is a finding.

Implementation Procedure

Fix Text

The Software Installation Profile is required.

# pfexec pkg uninstall x11/server/xvnc

STIG check 37 of 215 in the Solaris 11 SPARC STIG checklist

← Previous · V-216294The rpcbind service must be configured for local only services unless organizationally defined.Next · V-216297 →The operating system must be configured to provide essential capabilities.