If NIS+ is configured on the Solaris system, YPCHECK must be set to true.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-954	GEN000000-SOL00200	SV-954r2_rule	ECSC-1	Medium

Description
If YPCHECK is not set to true, then ypfiles may not be checked.

STIG	Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE	2015-10-01

Details

Check Text ( C-2250r2_chk )
Perform the following to determine if ASET is configured to check NIS+. # grep YPCHECK /usr/aset/asetenv If NIS+ is running and the YPCHECK variable is set to false, then this is a finding.

Fix Text (F-1108r2_fix)
Edit the ASET configuration and set YPCHECK to true on systems running NIS. (If NIS+ is configured, YPCHECK must only be set to false to avoid going into NIS compatibility mode.) Configure NIS to use YPCHECK.