UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The NFS server must have logging implemented.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4300 GEN000000-SOL00400 SV-40041r1_rule ECAR-1 ECAR-2 ECAR-3 Medium
Description
Filesystem logging, especially for NFS exported file systems, can be critical to detecting data misuse and possible hardware/system errors that may, otherwise, go unnoticed.
STIG Date
SOLARIS 10 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2017-01-27

Details

Check Text ( None )
None
Fix Text (F-34153r1_fix)
Edit /etc/dfs/dfstab and add the log option to all exported filesystems. Run the shareall command for the changes to take effect.

NFS version 2 or 3 must be forced by updating the NFS_SERVER_VERSMAX variable appropriately in /etc/default/nfs and restarting the NFS daemon.