STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The asetenv file YPCHECK variable must be set to true when NIS+ is configured.

DISA Rule

SV-220071r603266_rule

Vulnerability Number

V-220071

Group Title

SRG-OS-000016

Rule Version

GEN000000-SOL00200

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-000032 - The information system enforces information flow control using organization-defined security policy filters as a basis for flow control decisions for organization-defined information flows.

Weight

10

Fix Recommendation

Edit the ASET configuration and set YPCHECK to true on systems running NIS. (If NIS+ is configured, YPCHECK must only be set to false to avoid going into NIS compatibility mode.) Configure NIS to use YPCHECK.

Check Contents

Perform the following to determine if ASET is configured to check NIS+.

# grep YPCHECK /usr/aset/asetenv

If NIS+ is running and the YPCHECK variable is set to false, then this is a finding.

Vulnerability Number

V-220071

Documentable

False

Rule Version

GEN000000-SOL00200

Severity Override Guidance

Perform the following to determine if ASET is configured to check NIS+.

# grep YPCHECK /usr/aset/asetenv

If NIS+ is running and the YPCHECK variable is set to false, then this is a finding.

Check Content Reference

M

Target Key

4061

Comments