UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The /etc/zones directory, and its contents, must not have an extended ACL.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22606 GEN000000-SOL00600 SV-27020r2_rule ECLP-1 Medium
Description
Solaris zones configuration files must be protected against illicit creation, modification, and deletion.
STIG Date
SOLARIS 10 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2018-04-10

Details

Check Text ( C-27952r2_chk )
Check the permissions of the file.
# ls -lLd /etc/zones
# ls -lLR /etc/zones
If the permissions of the file or directory contains a "+", an extended ACL is present, this is a finding.

If zones are not installed on the system, this is not a finding.
Fix Text (F-24287r1_fix)
Remove the extended ACL from the file.
# chmod A-