Solaris 11 X86 Security Technical Implementation Guide

The Solaris 11 X86 Security Technical Implementation Guide (V3 R7) has 214 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

214STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

The TFTP service daemon must not be installed unless required.

Solaris 11 X86 Security Technical Implementation Guide

Assessment Title

Rule Text

The TFTP service daemon must not be installed unless required.

Description

Discussion Text

TFTP is an insecure protocol.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-216056

Rule

SV-216056r959010_rule

Severity

high

Rule Version

SOL-11.1-020140

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine if the TFTP package is installed.

# pkg list service/network/tftp

If an installed package named "/service/network/tftp" is listed and not required for operations, this is a finding.

Implementation Procedure

Fix Text

The Software Installation Profile is required.

# pfexec pkg uninstall install/installadm
# pfexec pkg uninstall service/network/tftp

STIG check 34 of 214 in the Solaris 11 X86 STIG checklist

← Previous · V-216055The FTP daemon must not be installed unless required.Next · V-216057 →The telnet service daemon must not be installed unless required.