UCF STIG Viewer Logo

The Sun Ray Session Server (SRSS) is used to host other applications.


Overview

Finding ID Version Rule ID IA Controls Severity
V-16412 SUN0220 SV-17405r1_rule DCBP-1 Medium
Description
The availability of the Sun Ray Session Server (SRSS) is critical since it manages the sessions associated with the Desktop Units. The Sun Ray software controls user authentication, encryption between Sun Ray servers and Desktop Units, system administration tools, session management, policy enforcement, and device management. If other applications are competing or using hardware resources, the availability of the SRSS may be a risk. Furthermore, application programs such as web servers, databases, or messaging systems may provide an avenue by which a privileged user may unintentionally introduce malicious code.
STIG Date
Sun Ray 4 Policy STIG 2015-04-02

Details

Check Text ( C-17282r1_chk )
Ask the IAO/SA what applications are running on the SRSS. Besides the documented UNIX services, the SRSS may have the following running as part of the Sun Ray solution and these are not applicable to this check:
- DHCP Server
- Sun Ray Connector for Windows OS
Fix Text (F-16437r1_fix)
Remove all applications that are not required for the SRSS.