The VNC server package must not be installed unless required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-216295	SOL-11.1-020180	SV-216295r603267_rule		Medium

Description
The VNC service uses weak authentication capabilities and provides the user complete graphical system access.

STIG	Date
Solaris 11 SPARC Security Technical Implementation Guide	2022-11-18

Details

Check Text ( C-17531r370973_chk )
Determine if the VNC server package is installed. # pkg list x11/server/xvnc If an installed package named "x11/server/xvnc is listed" is listed, this is a finding.

Fix Text (F-17529r370974_fix)
The Software Installation Profile is required. # pfexec pkg uninstall x11/server/xvnc