Guia de Segurança e Conformidade do Oracle® Solaris 11.2

Exit Print View

Updated: Julho de 2014
 
 

Compliance Hints and Troubleshooting

    Use the following information to help you pass compliance more quickly.

  • Have sufficient rpool capacity.

  • Check for mounted file systems. Unmount them for the duration of the compliance check.

  • You can prevent many failures by not installing or by uninstalling legacy packages.

    For example, the default large server and desktop installations include legacy packages. Rather than disabling the services individually, protect the system by uninstalling the entire package. The following commands show the contents of two legacy packages:

    # pkg contents pkg:/service/network/legacy-remote-utilities
    # pkg contents pkg:/service/network/legacy-network-services

    If you do not use any of the commands that are included in these packages, uninstall the packages. The compliance command runs more than 30 checks on the contents of these legacy packages.

  • Reduce failures by adding security text to the /etc/motd and /etc/issue files. Add security text to the banners for login services, such as SSH, ftp, and gdm.