UCF STIG Viewer Logo

The /etc/zones directory, and its contents, must have the vendor default owner, group, and permissions.


Overview

Finding ID Version Rule ID IA Controls Severity
V-216474 SOL-11.1-100010 SV-216474r603267_rule Low
Description
Incorrect ownership can result in unauthorized changes or theft of data.
STIG Date
Solaris 11 SPARC Security Technical Implementation Guide 2021-11-23

Details

Check Text ( C-17710r371504_chk )
This check applies to the global zone only. Determine the zone that you are currently securing.

# zonename

If the command output is "global", this check applies.

Check the ownership of the files and directories.

# pkg verify system/zones

The command should return no output. If output is produced, this is a finding.
Fix Text (F-17708r371505_fix)
This check applies to the global zone only. Determine the zone that you are currently securing.

# zonename

If the command output is "global", this check applies.

The Software Installation profile is required.

Change the ownership and permissions of the files and directories to the factory default.

# pkg fix system/zones