The operating system must be a supported release.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-226430	GEN000100	SV-226430r603265_rule		High

Description
An operating system release is considered supported if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.

STIG	Date
Solaris 10 SPARC Security Technical Implementation Guide	2022-09-07

Details

Check Text ( C-36370r602713_chk )
# uname -a Oracle has committed to indefinite "sustaining support" for recent Solaris operating system releases. Verify proof of purchase of support from Oracle. If the release is not supported, this is a finding. Severity Override Guidance: If an extended support agreement provides security patches for the unsupported product is procured from the vendor, this finding may be downgraded to a CAT III.

Check Text ( C-36370r602713_chk )

# uname -a

Oracle has committed to indefinite "sustaining support" for recent Solaris operating system releases. Verify proof of purchase of support from Oracle.

If the release is not supported, this is a finding.

Severity Override Guidance:
If an extended support agreement provides security patches for the unsupported product is procured from the vendor, this finding may be downgraded to a CAT III.

Fix Text (F-36334r602714_fix)
Upgrade to a supported version of the operating system.