Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The graphical login service provides the capability of logging into the system using an X-Windows type interface from the console. If graphical login access for the console is required, the service must be in local-only mode.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-216080 | SOL-11.1-030010 | SV-216080r603268_rule | Medium |
| Description |
|---|
| Externally accessible graphical desktop software may open the system to remote attacks. |
| STIG | Date |
|---|---|
| Solaris 11 x86 Security Technical Implementation Guide | 2024-02-02 |
Details
| Check Text ( C-17318r372622_chk ) |
|---|
| Determine if the X11 server system is providing remote services on the network. # svcprop -p options/tcp_listen svc:/application/x11/x11-server If the output of the command is "true" and network access to graphical user login is not required, this is a finding. |
| Fix Text (F-17316r372623_fix) |
|---|
| The System Administrator profile is required: Configure the X11 server for local system only graphics access. # pfexec svccfg -s svc:/application/x11/x11-server setprop options/tcp_listen=false |