STIGQter: STIG Summary: Solaris 10 SPARC Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

If the system is a firewall, ASET must be used on the system, and the firewall parameters must be set in /usr/aset/asetenv.

DISA Rule

SV-226412r603265_rule

Vulnerability Number

V-226412

Group Title

SRG-OS-000016

Rule Version

GEN000000-SOL00160

Severity

CAT II

CCI(s)

• CCI-000032 - The information system enforces information flow control using organization-defined security policy filters as a basis for flow control decisions for organization-defined information flows.
• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

If the system is used as a firewall and ASET is used, ensure the firewall parameter is configured in /usr/aset/asetenv.

Check Contents

Perform the following to determine if ASET is being used.

# crontab -l |grep aset

A returned entry would indicate ASET is being utilized. Determine if ASET is configured to check firewall settings.

# grep TASKS /usr/aset/asetenv | grep firewall

If an entry is not returned, this is a finding.

Vulnerability Number

V-226412

Documentable

False

Rule Version

GEN000000-SOL00160

Severity Override Guidance

Perform the following to determine if ASET is being used.

# crontab -l |grep aset

A returned entry would indicate ASET is being utilized. Determine if ASET is configured to check firewall settings.

# grep TASKS /usr/aset/asetenv | grep firewall

If an entry is not returned, this is a finding.

Check Content Reference

M

Target Key

4060

Comments