The /etc/zones directory, and its contents, must have the vendor default owner, group, and permissions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-216238	SOL-11.1-100010	SV-216238r603268_rule		Low

Description
Incorrect ownership can result in unauthorized changes or theft of data.

STIG	Date
Solaris 11 X86 Security Technical Implementation Guide	2021-11-23

Details

Check Text ( C-17476r373090_chk )
This check applies to the global zone only. Determine the zone that you are currently securing. # zonename If the command output is "global", this check applies. Check the ownership of the files and directories. # pkg verify system/zones The command should return no output. If output is produced, this is a finding.

Fix Text (F-17474r373091_fix)
This check applies to the global zone only. Determine the zone that you are currently securing. # zonename If the command output is "global", this check applies. The Software Installation profile is required. Change the ownership and permissions of the files and directories to the factory default. # pkg fix system/zones