Solaris 11 X86 Security Technical Implementation Guide

The Solaris 11 X86 Security Technical Implementation Guide (V3 R7) has 214 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

214STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

The operating system must not allow logins for users with blank passwords.

Solaris 11 X86 Security Technical Implementation Guide

Assessment Title

Rule Text

The operating system must not allow logins for users with blank passwords.

Description

Discussion Text

If the password field is blank and the system does not enforce a policy that passwords are required, it could allow login without proper authentication of a user.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-216128

Rule

SV-216128r959010_rule

Severity

high

Rule Version

SOL-11.1-040480

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine if the system is enforcing a policy that passwords are required.

# grep ^PASSREQ /etc/default/login

If the command does not return:

PASSREQ=YES

this is a finding.

Implementation Procedure

Fix Text

The root role is required.

Modify the /etc/default/login file.

# pfedit /etc/default/login

Insert the line:

PASSREQ=YES

STIG check 97 of 214 in the Solaris 11 X86 STIG checklist

← Previous · V-216127The operating system session lock mechanism, when activated on a device with a display screen, must place a publicly viewable pattern onto the associated display, hiding what was previously visible on the screen.Next · V-216129 →The operating system must prevent remote devices that have established a non-remote connection with the system from communicating outside of the communication path with resources in external networks.