The VNC server package must not be installed unless required.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-216295 | SOL-11.1-020180 | SV-216295r959010_rule | CCI-000366 | medium |
| Description | ||||
| The VNC service uses weak authentication capabilities and provides the user complete graphical system access. | ||||
| STIG | Date | |||
| Solaris 11 SPARC Security Technical Implementation Guide | 2025-05-05 | |||
Details
Check Text (C-216295r959010_chk)
Determine if the VNC server package is installed.
# pkg list x11/server/xvnc
If an installed package named "x11/server/xvnc is listed" is listed, this is a finding.
Fix Text (F-17529r370974_fix)
The Software Installation Profile is required.
# pfexec pkg uninstall x11/server/xvnc