The /etc/zones directory, and its contents, must not have an extended ACL.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-226426	GEN000000-SOL00600	SV-226426r603265_rule		Medium

Description
Solaris zones configuration files must be protected against illicit creation, modification, and deletion.

STIG	Date
Solaris 10 SPARC Security Technical Implementation Guide	2020-12-04

Details

Check Text ( C-28587r482639_chk )
Check the permissions of the file. # ls -lLd /etc/zones # ls -lLR /etc/zones If the permissions of the file or directory contains a "+", an extended ACL is present, this is a finding. If zones are not installed on the system, this is not a finding.

Fix Text (F-28575r482640_fix)
Remove the extended ACL from the file. # chmod A-