← Back to Solaris 11 SPARC Security Technical Implementation Guide

V-216474

CAT III (Low)

The /etc/zones directory, and its contents, must have the vendor default owner, group, and permissions.

Rule ID

SV-216474r959010_rule

STIG

Solaris 11 SPARC Security Technical Implementation Guide

Version

V3R5

CCIs

CCI-000366

Discussion

Incorrect ownership can result in unauthorized changes or theft of data.

Check Content

This check applies to the global zone only. Determine the zone that you are currently securing.

# zonename

If the command output is "global", this check applies.

Check the ownership of the files and directories.

# pkg verify system/zones

The command should return no output. If output is produced, this is a finding.

Fix Text

This check applies to the global zone only.  Determine the zone that you are currently securing.

# zonename

If the command output is "global", this check applies.

The Software Installation profile is required.

Change the ownership and permissions of the files and directories to the factory default. 

# pkg fix system/zones