Home
Security Hardening
CIS Solaris 10 L1 V5 2

CIS Solaris 10 L1 V5 2

Disable Apache services – Make sure that /etc/apache/httpd.conf does not exist. Note this check is only applicable for Apache 1.x
Details The action in this section describes disabling the Apache 1.x and 2.x web servers provided with Solaris 10. Both...
Disable Apache services – Make sure that network/http:apache2 is disabled.
Details The action in this section describes disabling the Apache 1.x and 2.x web servers provided with Solaris 10. Both...
Disable automount daemon – Make sure that /system/filesystem/autofs is disabled.
Details The automount daemon is normally used to automatically mount NFS file systems from remote file servers when needed. However,...
Disable Generic Security Services (GSS) daemons – Make sure that /network/rpc/gss is disabled
Details The GSS API is a security abstraction layer that is designed to make it easier for developers to integrate...
Disable Kerberos TGT Expiration Warning – Make sure that /network/security/ktkt_warn is disabled
Details While Kerberos can be a security enhancement, if the local site is not currently using Kerberos then there is...
Disable LDAP Cache Manager – Make sure that /network/ldap/client is disabled
Details If the local site is not currently using LDAP as a naming service, there is no need to keep...
Disable Local CDE Calendar Manager – Make sure that /network/rpc/cde-calendar-manager is disabled
Details CDE Calendar Manager is an appointment and resource scheduling tool. CDE Calendar Manager can help you schedule and keep...
Disable Local CDE ToolTalk Database Server – Make sure that /network/rpc/cde-ttdbserver:tcp is disabled
Details The ToolTalk service enables independent CDE applications to communicate with each other without having direct knowledge of each other....
Disable Local Graphical Login Environment – Make sure that /application/graphical-login/gdm2-login is disabled
Details The CDE login service provides the capability of logging into the system using an Xwindows type interface from the...
Disable Local RPC Port Mapping Service – Make sure that network/rpc/bind is disabled.
Details RPC-based services are typically deployed to use very weak or non-existent authentication and yet may share very sensitive information....

CIS Solaris 10 L1 V5 2

Disable Apache services – Make sure that /etc/apache/httpd.conf does not exist. Note this check is only applicable for Apache 1.x

Disable Apache services – Make sure that network/http:apache2 is disabled.

Disable automount daemon – Make sure that /system/filesystem/autofs is disabled.

Disable Generic Security Services (GSS) daemons – Make sure that /network/rpc/gss is disabled

Disable Kerberos TGT Expiration Warning – Make sure that /network/security/ktkt_warn is disabled

Disable LDAP Cache Manager – Make sure that /network/ldap/client is disabled

Disable Local CDE Calendar Manager – Make sure that /network/rpc/cde-calendar-manager is disabled

Disable Local CDE ToolTalk Database Server – Make sure that /network/rpc/cde-ttdbserver:tcp is disabled

Disable Local Graphical Login Environment – Make sure that /application/graphical-login/gdm2-login is disabled

Disable Local RPC Port Mapping Service – Make sure that network/rpc/bind is disabled.