The asetenv file YPCHECK variable must be set to true when NIS+ is configured.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-220071 | GEN000000-SOL00200 | SV-220071r603266_rule | Medium |
| Description |
|---|
| If YPCHECK is not set to true in asetenv, then ypfiles may not be checked. |
| STIG | Date |
|---|---|
| Solaris 10 X86 Security Technical Implementation Guide | 2022-09-07 |
Details
| Check Text ( C-21780r488153_chk ) |
|---|
| Perform the following to determine if ASET is configured to check NIS+. # grep YPCHECK /usr/aset/asetenv If NIS+ is running and the YPCHECK variable is set to false, then this is a finding. |
| Fix Text (F-21779r488154_fix) |
|---|
| Edit the ASET configuration and set YPCHECK to true on systems running NIS. (If NIS+ is configured, YPCHECK must only be set to false to avoid going into NIS compatibility mode.) Configure NIS to use YPCHECK. |