The VNC server package must not be installed unless required.
Overview
| Finding ID |
Version |
Rule ID |
IA Controls |
Severity |
| V-216060 |
SOL-11.1-020180 |
SV-216060r959010_rule |
|
Medium |
| Description |
| The VNC service uses weak authentication capabilities and provides the user complete graphical system access. |
Details
| Check Text (C-17298r372562_chk) |
Determine if the VNC server package is installed.
# pkg list x11/server/xvnc
If an installed package named "x11/server/xvnc is listed" is listed, this is a finding. |
| Fix Text (F-17296r372563_fix) |
The Software Installation Profile is required.
# pfexec pkg uninstall x11/server/xvnc |