STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The system must be configured to only boot from the system boot device.

DISA Rule

SV-227982r603266_rule

Vulnerability Number

V-227982

Group Title

SRG-OS-000480

Rule Version

GEN008600

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the system to only boot from system startup media.

Check Contents

Determine if the system is configured to boot from devices other than the system startup media. If so, this is a finding.

In most cases, this will require access to the BIOS or system controller. The exact procedure will be hardware-dependent, and the SA should be consulted to identify the specific configuration. In the event the BIOS or system controller is not accessible without adversely impacting (e.g., restarting) the system, the SA may be interviewed to determine compliance with the requirement.

Vulnerability Number

V-227982

Documentable

False

Rule Version

GEN008600

Severity Override Guidance

Determine if the system is configured to boot from devices other than the system startup media. If so, this is a finding.

In most cases, this will require access to the BIOS or system controller. The exact procedure will be hardware-dependent, and the SA should be consulted to identify the specific configuration. In the event the BIOS or system controller is not accessible without adversely impacting (e.g., restarting) the system, the SA may be interviewed to determine compliance with the requirement.

Check Content Reference

M

Target Key

4061

Comments