Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The .Xauthority utility must only permit access to authorized hosts.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-216078 | SOL-11.1-020550 | SV-216078r959010_rule | Medium |
| Description |
|---|
| If unauthorized clients are permitted access to the X server, a user's X session may be compromised. |
| STIG | Date |
|---|---|
| Solaris 11 X86 Security Technical Implementation Guide | 2024-05-30 |
Details
| Check Text ( C-17316r372616_chk ) |
|---|
| If X Display Manager (XDM) is not used on the system, this is not applicable. Determine if XDM is running. Procedure: # ps -ef | grep xdm Check the X Window system access is limited to authorized clients. Procedure: # xauth xauth> list Ask the SA if the clients listed are authorized. If any are not, this is a finding. |
| Fix Text (F-17314r372617_fix) |
|---|
| Remove unauthorized clients from the xauth configuration. Procedure: # xauth remove |