UCF STIG Viewer Logo

The /etc/zones directory, and its contents, must not have an extended ACL.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227552 GEN000000-SOL00600 SV-227552r603266_rule Medium
Description
Solaris zones configuration files must be protected against illicit creation, modification, and deletion.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2020-12-04

Details

Check Text ( C-29714r488189_chk )
Check the permissions of the file.
# ls -lLd /etc/zones
# ls -lLR /etc/zones
If the permissions of the file or directory contains a "+", an extended ACL is present, this is a finding.

If zones are not installed on the system, this is not a finding.
Fix Text (F-29702r488190_fix)
Remove the extended ACL from the file.
# chmod A-