UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

If NIS+ is configured on the Solaris system, YPCHECK must be set to true.


Overview

Finding ID Version Rule ID IA Controls Severity
V-954 GEN000000-SOL00200 SV-954r2_rule ECSC-1 Medium
Description
If YPCHECK is not set to true, then ypfiles may not be checked.
STIG Date
Solaris 9 X86 Security Technical Implementation Guide 2013-07-02

Details

Check Text ( C-2250r2_chk )
Perform the following to determine if ASET is configured to check NIS+.

# grep YPCHECK /usr/aset/asetenv

If NIS+ is running and the YPCHECK variable is set to false, then this is a finding.
Fix Text (F-1108r2_fix)
Edit the ASET configuration and set YPCHECK to true on systems running NIS. (If NIS+ is configured, YPCHECK must only be set to false to avoid going into NIS compatibility mode.) Configure NIS to use YPCHECK.