UCF STIG Viewer Logo

The NFS server must have logging implemented.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4300 GEN000000-SOL00400 SV-40041r1_rule ECAR-1 ECAR-2 ECAR-3 Medium
Description
Filesystem logging, especially for NFS exported file systems, can be critical to detecting data misuse and possible hardware/system errors that may, otherwise, go unnoticed.
STIG Date
SOLARIS 10 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-09-17

Details

Check Text ( None )
None
Fix Text (F-34153r1_fix)
Edit /etc/dfs/dfstab and add the log option to all exported filesystems. Run the shareall command for the changes to take effect.

NFS version 2 or 3 must be forced by updating the NFS_SERVER_VERSMAX variable appropriately in /etc/default/nfs and restarting the NFS daemon.