Solaris 11 SPARC Security Technical Implementation Guide

The Solaris 11 SPARC Security Technical Implementation Guide (V3 R7) has 215 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

215STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

The system must not respond to ICMP timestamp requests.

Solaris 11 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

The system must not respond to ICMP timestamp requests.

Description

Discussion Text

By accurately determining the system's clock state, an attacker can more effectively attack certain time-based pseudorandom number generators (PRNGs) and the authentication systems that rely on them.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-216369

Rule

SV-216369r959010_rule

Severity

low

Rule Version

SOL-11.1-050020

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine if ICMP time stamp responses are disabled.

# ipadm show-prop -p _respond_to_timestamp -co current ip


If the output of both commands is not "0", this is a finding.

Implementation Procedure

Fix Text

The Network Management profile is required.

Disable source respond to timestamp.

# pfexec ipadm set-prop -p _respond_to_timestamp=0 ip

STIG check 102 of 215 in the Solaris 11 SPARC STIG checklist

← Previous · V-216368The system must disable directed broadcast packet forwarding.Next · V-216370 →The system must not respond to ICMP broadcast timestamp requests.