The graphical login service provides the capability of logging into the system using an X-Windows type interface from the console. If graphical login access for the console is required, the service must be in local-only mode.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The graphical login service provides the capability of logging into the system using an X-Windows type interface from the console. If graphical login access for the console is required, the service must be in local-only mode.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-47929	SOL-11.1-030010	SV-60801r1_rule		Medium

Description
Externally accessible graphical desktop software may open the system to remote attacks.

STIG	Date
Solaris 11 SPARC Security Technical Implementation Guide	2017-01-05

Details

Check Text ( C-50365r1_chk )
Determine if the X11 server system is providing remote services on the network. # svcprop -p options/tcp_listen svc:/application/x11/x11-server If the output of the command is "true" and network access to graphical user login is not required, this is a finding.

Fix Text (F-51541r1_fix)
The System Administrator profile is required: Configure the X11 server for local system only graphics access. # pfexec svccfg -s svc:/application/x11/x11-server setprop options/tcp_listen=false