STIGQter: STIG Summary: Solaris 11 X86 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

.Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server.

DISA Rule

SV-216077r603870_rule

Vulnerability Number

V-216077

Group Title

SRG-OS-000480

Rule Version

SOL-11.1-020540

Severity

CAT II

CCI(s)

• CCI-000297 - The organization reviews and updates the baseline configuration of the information system when required due to organization-defined circumstances.
• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Create an X*.hosts file, where * is a display number that may be used to limit X window connections.

Add the list of authorized X clients to the file.

Check Contents

If X Display Manager (XDM) is not used on the system, this is not applicable.

Determine if XDM is running.

Procedure:
# ps -ef | grep xdm

Determine if xauth is being used.

Procedure:
# xauth
xauth> list

If the above command sequence does not show any host other than the localhost, then xauth is not being used.

Search the system for an X*.hosts files, where * is a display number that may be used to limit X window connections.

If no files are found, X*.hosts files are not being used.

If the X*.hosts files contain any unauthorized hosts, this is a finding.

If both xauth and X*.hosts files are not being used, this is a finding.

Vulnerability Number

V-216077

Documentable

False

Rule Version

SOL-11.1-020540

Severity Override Guidance

If X Display Manager (XDM) is not used on the system, this is not applicable.

Determine if XDM is running.

Procedure:
# ps -ef | grep xdm

Determine if xauth is being used.

Procedure:
# xauth
xauth> list

If the above command sequence does not show any host other than the localhost, then xauth is not being used.

Search the system for an X*.hosts files, where * is a display number that may be used to limit X window connections.

If no files are found, X*.hosts files are not being used.

If the X*.hosts files contain any unauthorized hosts, this is a finding.

If both xauth and X*.hosts files are not being used, this is a finding.

Check Content Reference

M

Target Key

4021

Comments