Details

Solaris 11 does not enable the suspend capability by default and now uses the poweradm command to suspend the system.

Bear in mind that users with physical access to a system can simply remove power from the machine if they are truly motivated to take the system off-line, and granting the capability to use poweradm may be a more graceful way of allowing desktop users to shut down their own machines.

Solution

Perform the following to implement the recommended state:
# poweradm set suspend-enable=false
# poweradm update

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/612

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-6(10)

Source

• Tenable.com/audits