The asetenv file YPCHECK variable must be set to true when NIS+ is configured.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-954	GEN000000-SOL00200	SV-36750r1_rule	ECSC-1	Medium

Description
If YPCHECK is not set to true in asetenv, then ypfiles may not be checked.

STIG	Date
Solaris 10 X86 Security Technical Implementation Guide	2014-04-04

Details

Check Text ( C-2250r2_chk )
Perform the following to determine if ASET is configured to check NIS+. # grep YPCHECK /usr/aset/asetenv If NIS+ is running and the YPCHECK variable is set to false, then this is a finding.

Fix Text (F-31075r1_fix)
Edit the ASET configuration and set YPCHECK to true on systems running NIS. (If NIS+ is configured, YPCHECK must only be set to false to avoid going into NIS compatibility mode.) Configure NIS to use YPCHECK.