Generic Security Services (GSS) must be disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-216316 | SOL-11.1-030030 | SV-216316r959010_rule | CCI-000366 | low |
| Description | ||||
| This service should be disabled if it is not required. | ||||
| STIG | Date | |||
| Solaris 11 SPARC Security Technical Implementation Guide | 2025-05-05 | |||
Details
Check Text (C-216316r959010_chk)
Determine the status of the Generic Security Services.
# svcs -Ho state svc:/network/rpc/gss
If the GSS service is reported as online, this is a finding.
Fix Text (F-17550r371037_fix)
The Service Management profile is required:
Disable the GSS service.
# pfexec svcadm disable svc:/network/rpc/gss