STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The portmap or rpcbind service must not be installed unless needed.

DISA Rule

SV-227821r603266_rule

Vulnerability Number

V-227821

Group Title

SRG-OS-000095

Rule Version

GEN003815

Severity

CAT II

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Remove all permissions from the rpcbind file.

Procedure:
# chmod 0000 /usr/sbin/rpcbind

Check Contents

If the system needs the portmap service to operate, this is not applicable. The rpcbind program is part of a core Solaris package and cannot be removed. Verify the permissions on the rpcbind file.
# ls -lL /usr/sbin/rpcbind
If the rpcbind service is not required and the rpcbind file has non-zero permissions, this is a finding.

Vulnerability Number

V-227821

Documentable

False

Rule Version

GEN003815

Severity Override Guidance

If the system needs the portmap service to operate, this is not applicable. The rpcbind program is part of a core Solaris package and cannot be removed. Verify the permissions on the rpcbind file.
# ls -lL /usr/sbin/rpcbind
If the rpcbind service is not required and the rpcbind file has non-zero permissions, this is a finding.

Check Content Reference

M

Target Key

4061

Comments