STIGQter: STIG Summary: Solaris 11 SPARC Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The operating system must prevent non-privileged users from circumventing malicious code protection capabilities.

DISA Rule

SV-224670r603267_rule

Vulnerability Number

V-224670

Group Title

SRG-OS-000324

Rule Version

SOL-11.1-090120

Severity

CAT II

CCI(s)

• CCI-002235 - The information system prevents non-privileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.

Weight

10

Fix Recommendation

The operator will ensure that anti-virus software is installed and operating.

Check Contents

The operator will ensure that anti-virus software is installed and operating.

If the operator is unable to provide a documented configuration for an installed anti-virus software system or if not properly used, this is a finding.

Vulnerability Number

V-224670

Documentable

False

Rule Version

SOL-11.1-090120

Severity Override Guidance

The operator will ensure that anti-virus software is installed and operating.

If the operator is unable to provide a documented configuration for an installed anti-virus software system or if not properly used, this is a finding.

Check Content Reference

M

Target Key

4022

Comments