Solaris 11 SPARC Security Technical Implementation Guide

The Solaris 11 SPARC Security Technical Implementation Guide (V3 R7) has 215 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

215STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

World-writable files must not exist.

Solaris 11 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

World-writable files must not exist.

Description

Discussion Text

Data in world-writable files can be read, modified, and potentially compromised by any user on the system. World-writable files may also indicate an incorrectly written script or program that could potentially be the cause of a larger compromise to the system's integrity.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-216434

Rule

SV-216434r959010_rule

Severity

medium

Rule Version

SOL-11.1-070180

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

The root role is required.

Check for the existence of world-writable files.

# find / \( -fstype nfs -o -fstype cachefs -o -fstype autofs \
-o -fstype ctfs -o -fstype mntfs -o -fstype objfs \
-o -fstype proc \) -prune -o -type f -perm -0002 -print
If output is produced, this is a finding.

Implementation Procedure

Fix Text

The root role is required.

Change the permissions of the files identified in the check step to remove the world-writable permission.

# pfexec chmod o-w [filename]

STIG check 146 of 215 in the Solaris 11 SPARC STIG checklist

← Previous · V-216433The system must not allow users to configure .forward files.Next · V-216435 →All valid SUID/SGID files must be documented.