UCF STIG Viewer Logo

The asetenv file YPCHECK variable must be set to true when NIS+ is configured.


Overview

Finding ID Version Rule ID IA Controls Severity
V-220018 GEN000000-SOL00200 SV-220018r603265_rule Medium
Description
If YPCHECK is not set to true in asetenv, then ypfiles may not be checked.
STIG Date
Solaris 10 SPARC Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-21727r482600_chk )
Perform the following to determine if ASET is configured to check NIS+.

# grep YPCHECK /usr/aset/asetenv

If NIS+ is running and the YPCHECK variable is set to false, then this is a finding.
Fix Text (F-21726r482601_fix)
Edit the ASET configuration and set YPCHECK to true on systems running NIS. (If NIS+ is configured, YPCHECK must only be set to false to avoid going into NIS compatibility mode.) Configure NIS to use YPCHECK.