Solaris 11 SPARC Security Technical Implementation Guide

The Solaris 11 SPARC Security Technical Implementation Guide (V3 R7) has 215 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

215STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

The system must verify that package updates are digitally signed.

Solaris 11 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

The system must verify that package updates are digitally signed.

Description

Discussion Text

Digitally signed packages ensure that the source of the package can be identified.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-219969

Rule

SV-219969r1016281_rule

Severity

medium

Rule Version

SOL-11.1-020020

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine what the signature policy is for pkg publishers:

# pkg property | grep signature-policy

Check that output produces:

signature-policy verify

If the output does not confirm that signature-policy verify is active, this is a finding.

Implementation Procedure

Fix Text

The Software Installation Profile is required.

Configure the package system to ensure that digital signatures are verified.

# pfexec pkg set-property signature-policy verify

STIG check 196 of 215 in the Solaris 11 SPARC STIG checklist

← Previous · V-219968The operating system must configure auditing to reduce the likelihood of storage capacity being exceeded.Next · V-219970 →The operating system must employ automated mechanisms, per organization-defined frequency, to detect the addition of unauthorized components/devices into the operating system.