UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The asetenv file YPCHECK variable must be set to true when NIS+ is configured.


Overview

Finding ID Version Rule ID IA Controls Severity
V-954 GEN000000-SOL00200 SV-36750r1_rule ECSC-1 Medium
Description
If YPCHECK is not set to true in asetenv, then ypfiles may not be checked.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2019-12-31

Details

Check Text ( C-2250r2_chk )
Perform the following to determine if ASET is configured to check NIS+.

# grep YPCHECK /usr/aset/asetenv

If NIS+ is running and the YPCHECK variable is set to false, then this is a finding.
Fix Text (F-31075r1_fix)
Edit the ASET configuration and set YPCHECK to true on systems running NIS. (If NIS+ is configured, YPCHECK must only be set to false to avoid going into NIS compatibility mode.) Configure NIS to use YPCHECK.