Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The operating system must shut down by default upon audit failure (unless availability is an overriding concern).
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-47863 | SOL-11.1-010420 | SV-60737r1_rule | Medium |
| Description |
|---|
| Continuing to operate a system without auditing working properly can result in undocumented access or system changes. |
| STIG | Date |
|---|---|
| Solaris 11 SPARC Security Technical Implementation Guide | 2015-12-07 |
Details
| Check Text ( C-50309r1_chk ) |
|---|
| The Audit Configuration profile is required. This check applies to the global zone only. Determine the zone that you are currently securing. # zonename If the command output is "global", this check applies. # pfexec auditconfig -getpolicy | grep ahlt If the "ahlt" policy is not in effect as the active audit policy, this is a finding. |
| Fix Text (F-51481r1_fix) |
|---|
| The Audit Configuration profile is required. This action applies to the global zone only. Determine the zone that you are currently securing. # zonename If the command output is "global", this action applies. Set audit policy to halt on failure. # pfexec auditconfig -setpolicy +ahlt |