UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The /etc/zones directory, and its contents, must have the vendor default owner, group, and permissions.


Overview

Finding ID Version Rule ID IA Controls Severity
V-216238 SOL-11.1-100010 SV-216238r959010_rule Low
Description
Incorrect ownership can result in unauthorized changes or theft of data.
STIG Date
Solaris 11 X86 Security Technical Implementation Guide 2024-05-30

Details

Check Text ( C-17476r373090_chk )
This check applies to the global zone only. Determine the zone that you are currently securing.

# zonename

If the command output is "global", this check applies.

Check the ownership of the files and directories.

# pkg verify system/zones

The command should return no output. If output is produced, this is a finding.
Fix Text (F-17474r373091_fix)
This check applies to the global zone only. Determine the zone that you are currently securing.

# zonename

If the command output is "global", this check applies.

The Software Installation profile is required.

Change the ownership and permissions of the files and directories to the factory default.

# pkg fix system/zones