STIGQter: STIG Summary: Solaris 11 X86 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The value mesg n must be configured as the default setting for all users.

DISA Rule

SV-216108r603268_rule

Vulnerability Number

V-216108

Group Title

SRG-OS-000480

Rule Version

SOL-11.1-040270

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

The root role is required.

Edit the default profile configuration files.

# pfedit /etc/profile
# pfedit /etc/.login

In each file add a new line:

mesg n

For each user on the system, enter the command:

# mesg n

Check Contents

Determine if "mesg n" is the default for users.

# grep "^mesg" /etc/.login

# grep "^mesg" /etc/profile

If either of these commands produces a line:
mesg y

this is a finding.

For each existing user on the system, enter the command:

# mesg

If the command output is:
is y

this is a finding.

Vulnerability Number

V-216108

Documentable

False

Rule Version

SOL-11.1-040270

Severity Override Guidance

Determine if "mesg n" is the default for users.

# grep "^mesg" /etc/.login

# grep "^mesg" /etc/profile

If either of these commands produces a line:
mesg y

this is a finding.

For each existing user on the system, enter the command:

# mesg

If the command output is:
is y

this is a finding.

Check Content Reference

M

Target Key

4021

Comments