UCF STIG Viewer Logo

The VNC server package must not be installed unless required.


Overview

Finding ID Version Rule ID IA Controls Severity
V-47921 SOL-11.1-020180 SV-60793r1_rule Medium
Description
The VNC service uses weak authentication capabilities and provides the user complete graphical system access.
STIG Date
Solaris 11 X86 Security Technical Implementation Guide 2019-12-18

Details

Check Text ( C-50357r1_chk )
Determine if the VNC server package is installed.

# pkg list x11/server/xvnc

If an installed package named "x11/server/xvnc is listed" is listed, this is a finding.
Fix Text (F-51533r1_fix)
The Software Installation Profile is required.

# pfexec pkg uninstall x11/server/xvnc