The VNC server package must not be installed unless required.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-216060SOL-11.1-020180SV-216060r959010_ruleCCI-000366medium
Description
The VNC service uses weak authentication capabilities and provides the user complete graphical system access.
STIGDate
Solaris 11 X86 Security Technical Implementation Guide2025-05-05

Details

Check Text (C-216060r959010_chk)

Determine if the VNC server package is installed. # pkg list x11/server/xvnc If an installed package named "x11/server/xvnc is listed" is listed, this is a finding.

Fix Text (F-17296r372563_fix)

The Software Installation Profile is required. # pfexec pkg uninstall x11/server/xvnc