Details

Solaris 11 does not enable the suspend capability by default and now uses the poweradm command to suspend the system.

Rationale:

Bear in mind that users with physical access to a system can simply remove power from the machine if they are truly motivated to take the system off-line, and granting the capability to use poweradm may be a more graceful way of allowing desktop users to shut down their own machines.

Solution

Perform the following to implement the recommended state:

# poweradm set suspend-enable=false

# poweradm update

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/2582

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6
• CSCv7|5.1

Source

• Tenable.com/audits