Oracle^® Solaris 11.3 Security Compliance Guide

Index

A

adjuncts to benchmarks  Seetailorings

administering

assessmentsAdministering Compliance Assessments and Reports

CVE fixesAdministering Compliance to Critical Security Updates

alternate values in compliance rulesSelecting Alternate Values for Variables in Compliance Rules

assess subcommand

required rights for usingRights to Run the compliance Command

updated tailoringHow to Update Tailorings Based on Previous Benchmark Versions

useHow to Run Assessments and Reports

assessments

creatingAdministering Compliance Assessments and Reports

customized for security postureCreating Tailorings From Compliance Benchmarks

definition

Administering Compliance Assessments and Reports

About Compliance in Oracle Solaris

formats of reportsAssessment Report Formats

listingListing All Benchmarks, Profiles, Assessments, and Reports

naming conventions

How to Create a Tailoring From a Compliance Benchmark

Listing All Benchmarks, Profiles, Assessments, and Reports

of security policyAdministering Compliance Assessments and Reports

report formatsAssessment Report Formats

repositoryLocating Files in the Compliance Repository

running at regular intervalsRunning Assessments at Regular Intervals

scheduled

Running Assessments at Regular Intervals

What's New in Compliance in Oracle Solaris 11.3

B

Baseline profile

secure by default andSolaris Security Policy Benchmark

solaris benchmarkSolaris Security Policy Benchmark

benchmark adjuncts  Seetailorings

benchmark.profile guide contentsOracle Solaris Compliance Guides

benchmark guide contentsOracle Solaris Compliance Guides

benchmarks

aboutSecurity Benchmarks and Oracle Solaris

CISCIS Benchmark for Oracle Solaris

guides forOracle Solaris Compliance Guides

listingListing All Benchmarks, Profiles, Assessments, and Reports

overviewAbout Compliance in Oracle Solaris

PCI DSSPCI DSS Security Policy Benchmark

reports of complianceCompliance Reports and Guides

source of tailoringsCreating Tailorings From Compliance Benchmarks

tailorings andTailorings From Benchmarks

C

Center for Internet Security (CIS)CIS Benchmark for Oracle Solaris

changing

value of a ruleHow to Select a Non-Default Value for a Rule in a Tailoring

colons (:)

when searching for CVE fixesSeveral Ways of Listing the Packages That Contain Fixes to a CVE ID

Common Vulnerabilities and Exposures  SeeCVE

compliance

aboutAbout Compliance in Oracle Solaris

commandscompliance Command and Package

new featuresWhat's New in Compliance in Oracle Solaris 11.3

new features in this releaseWhat's New in Compliance in Oracle Solaris 11.3

oscap commandAbout Compliance in Oracle Solaris

overviewAbout Compliance in Oracle Solaris

report formats

Locating Files in the Compliance Repository

Assessment Report Formats

repository

Locating Files in the Compliance Repository

Locating Files in the Compliance Repository

rule variablesWhat's New in Compliance in Oracle Solaris 11.3

rulescompliance Command and Package

scheduled assessmentsWhat's New in Compliance in Oracle Solaris 11.3

scriptsAbout Compliance in Oracle Solaris

value tailoringWhat's New in Compliance in Oracle Solaris 11.3

compliance assessments  Seeassessments

Compliance Assessor rights profile

compliance command andRights to Run the compliance Command

tailorings andCreating Tailorings From Compliance Benchmarks

compliance profiles  Seeprofiles

Compliance Reporter rights profile

compliance command andRights to Run the compliance Command

compliance reports  Seereports

compliance resourcesCompliance Reference

compliance rules

value tailoringWhat's New in Compliance in Oracle Solaris 11.3

compliance command

assess subcommand

How to Update Tailorings Based on Previous Benchmark Versions

How to Run Assessments and Reports

Rights to Run the compliance Command

delete subcommandRights to Run the compliance Command

list subcommand

How to Run Assessments and Reports

Rights to Run the compliance Command

mounted file systems andcompliance Command and Package

report subcommandRights to Run the compliance Command

rights profiles andRights to Run the compliance Command

tailor subcommand

How to Create a Tailoring From a Compliance Benchmark

Rights to Run the compliance Command

compliance packagecompliance Package

configuring

scheduled assessmentsRunning Assessments at Regular Intervals

creating

assessmentsAdministering Compliance Assessments and Reports

guidesNew Guides for New Benchmarks

package manifest for a tailoringHow to Create a Package Manifest for a Tailoring

reportsAdministering Compliance Assessments and Reports

tailorings

Creating a Kerberos Tailoring From the Recommended Profile

Creating Tailorings From Compliance Benchmarks

critical patch updates (CPU)  SeeCVE

critical security updates

administeringAdministering CVE Updates in Oracle Solaris

curses programming language

tailorings andEditing Compliance Tailorings

CVE

administering fixes toAdministering Compliance to Critical Security Updates

IPS packages andAdministering CVE Updates in Oracle Solaris

listing information about fixesManaging CVE Updates From the Command Line

listing packages withSeveral Ways of Listing the Packages That Contain Fixes to a CVE ID

monitoring statusMonitoring CVE Status in Oracle Solaris

packages andLocating the Packages That Have CVE Updates in Oracle Solaris

Shellshock software bugSeveral Ways of Listing the Packages That Contain Fixes to a CVE ID

status in Oracle SolarisMonitoring CVE Status in Oracle Solaris

D

Defense Information Systems Agency-Security Technical Information Guides  SeeDISA-STIG

delete subcommand

required rights for usingRights to Run the compliance Command

DISA-STIG

Oracle Solaris benchmarks andSolaris Security Policy Benchmark

displaying  Seelisting

E

editing tailoringsEditing Compliance Tailorings

editing values in tailoringsSelecting Alternate Values for Variables in Compliance Rules

excluding

all rules in a tailoringHow to Create a Tailoring From a Compliance Benchmark

rules in a tailoringCreating a Kerberos Tailoring From the Recommended Profile

exporting

rules with commentsHow to Export a Tailoring

tailorings

How to Export a Tailoring

How to Export a Tailoring

tailorings for package manifestHow to Create a Package Manifest for a Tailoring

updated tailoringUpdating a Tailoring From an Export File

XCCDF format

How to Create a Package Manifest for a Tailoring

How to Export a Tailoring

eXtensible Configuration Checklist Description Format  SeeXCCDF

F

formats

of compliance reportsAssessment Report Formats

of CVE searchesSeveral Ways of Listing the Packages That Contain Fixes to a CVE ID

Free and Open Source (FOSS)

locating CVE fixes in Oracle SolarisLocating the Packages That Have CVE Updates in Oracle Solaris

G

guides

creatingNew Guides for New Benchmarks

of benchmarks and profilesOracle Solaris Compliance Guides

H

HTML report format

exampleAssessment Report Formats

I

importing

tailoringsHow to Export a Tailoring

including rules in a tailoringCreating a Kerberos Tailoring From the Recommended Profile

installing

compliance packageRunning Assessments and Reports

solaris-11-cpu packageInstalling the CPU Package

K

Kerberos

creating tailoring forCreating a Kerberos Tailoring From the Recommended Profile

L

list subcommand

required rights for usingRights to Run the compliance Command

useListing All Benchmarks, Profiles, Assessments, and Reports

listing compliance informationListing Compliance Information and Locating Assessments and Reports

listing CVE informationManaging CVE Updates From the Command Line

loading tailoringsLoading a Different Tailoring

localization

compliance andAbout Compliance in Oracle Solaris

log

report nameAssessment Report Formats

M

managing  Seeadministering

monitoring

CVE statusMonitoring CVE Status in Oracle Solaris

mounted file systems

compliance command andcompliance Command and Package

mounted home directories

compliance command andcompliance Command and Package

N

new features in this releaseWhat's New in Compliance in Oracle Solaris 11.3

O

Open Vulnerability and Assessment Language  SeeOVAL

OpenSCAP  SeeSCAP

oscap commandAbout Compliance in Oracle Solaris

OVAL

compliance scripts andAbout Compliance in Oracle Solaris

P

package groups

compliance package and

How to Run Assessments and Reports

compliance Package

package manifests

tailorings, forHow to Create a Package Manifest for a Tailoring

packages

creating manifest for tailoringHow to Create a Package Manifest for a Tailoring

CVE and

Locating the Packages That Have CVE Updates in Oracle Solaris

Administering CVE Updates in Oracle Solaris

pkg:/security/compliancecompliance Package

pkg:/support/critical-patch-update/solaris-11-cpuLocating the Packages That Have CVE Updates in Oracle Solaris

Payment Card Industry - Data Security Standard  SeePCI DSS security policy

PCI DSS security policy

benchmarkPCI DSS Security Policy Benchmark

guideOracle Solaris Compliance Guides

pci-dss guideOracle Solaris Compliance Guides

standardAbout Compliance in Oracle Solaris

pci-dss guideOracle Solaris Compliance Guides

pick screen

tailorings andEditing Compliance Tailorings

pkg:/security/compliance

installingRunning Assessments and Reports

package groups and

Running Assessments and Reports

compliance Package

pkg:/support/critical-patch-update/solaris-11-cpu

installingLocating the Packages That Have CVE Updates in Oracle Solaris

plain text

export formatHow to Export a Tailoring

report formatAssessment Report Formats

profiles

definitionSolaris Security Policy Benchmark

guides forOracle Solaris Compliance Guides

listingListing All Benchmarks, Profiles, Assessments, and Reports

solaris benchmark, fromSolaris Security Policy Benchmark

tailorings andTailorings From Benchmarks

R

Recommended profile

solaris benchmarkSolaris Security Policy Benchmark

use

Creating a Kerberos Tailoring From the Recommended Profile

How to Run Assessments and Reports

regular intervals

running assessmentsRunning Assessments at Regular Intervals

report.html

report nameAssessment Report Formats

report subcommand

required rights for usingRights to Run the compliance Command

useLocating Files in the Compliance Repository

reporting complianceCompliance Reports and Guides

reports

creatingAdministering Compliance Assessments and Reports

file formatsAssessment Report Formats

listingListing Compliance Information and Locating Assessments and Reports

listing pathnames toLocating Files in the Compliance Repository

naming conventions

How to Create a Tailoring From a Compliance Benchmark

How to Run Assessments and Reports

of assessmentsAssessment Report Formats

of security policyAdministering Compliance Assessments and Reports

repositoryLocating Files in the Compliance Repository

repository

assessments and reportsLocating Files in the Compliance Repository

pathnamesLocating Files in the Compliance Repository

results.xccdf.xml

report nameAssessment Report Formats

rights profile

Service ConfigurationHow to Schedule a Regular Assessment of a System Using Its Default Policy

rights profiles

compliance -t command, andCreating Tailorings From Compliance Benchmarks

Compliance AssessorRights to Run the compliance Command

Compliance ReporterRights to Run the compliance Command

compliance commandRights to Run the compliance Command

Software InstallationHow to Run Assessments and Reports

rules

changing variables in tailoringsHow to Select a Non-Default Value for a Rule in a Tailoring

compliance andcompliance Command and Package

excluding all in a tailoringHow to Create a Tailoring From a Compliance Benchmark

importing tailoringHow to Export a Tailoring

including and excluding in a tailoringCreating a Kerberos Tailoring From the Recommended Profile

rules in tailorings

parameterizedSelecting Alternate Values for Variables in Compliance Rules

S

SCAP

toolsAbout Compliance in Oracle Solaris

scheduled assessmentsWhat's New in Compliance in Oracle Solaris 11.3

Script Check Engine (SCE)

security scripts andAbout Compliance in Oracle Solaris

scripts

for complianceSecurity Benchmarks and Oracle Solaris

overviewAbout Compliance in Oracle Solaris

resourcesCompliance Utilities

secure by default

Baseline profileSolaris Security Policy Benchmark

security assessments  Seeassessments

security benchmarks  Seebenchmarks

security compliance  Seecompliance

Security Content Automation Protocol  SeeSCAP

security policy

assessments ofAdministering Compliance Assessments and Reports

benchmarks forSecurity Benchmarks and Oracle Solaris

customizing assessmentsCreating Tailorings From Compliance Benchmarks

security profiles  Seeprofiles

security standards  Seestandards

security updates  SeeCVE

Service Configuration rights profileHow to Schedule a Regular Assessment of a System Using Its Default Policy

Shellshock software bug

listing packages with fixSeveral Ways of Listing the Packages That Contain Fixes to a CVE ID

verifying fix is installedVerifying That a Fix for a CVE ID Is Installed

Solaris security policies

basis for tailoringsCreating Tailorings From Compliance Benchmarks

solaris.Baseline defaultRunning Assessments at Regular Intervals

solaris benchmarkSolaris Security Policy Benchmark

solaris guidesOracle Solaris Compliance Guides

solaris-11-cpu packageLocating the Packages That Have CVE Updates in Oracle Solaris

solaris.baseline

guideOracle Solaris Compliance Guides

solaris.Baseline

default compliance security policyRunning Assessments at Regular Intervals

solaris.recommended guideOracle Solaris Compliance Guides

solaris

benchmarkSolaris Security Policy Benchmark

guideOracle Solaris Compliance Guides

solaris benchmark

basis for tailoring that changes value of a ruleCreating a Tailoring That Checks for a Password Length of 13

solaris_pci-dss guideOracle Solaris Compliance Guides

SRUs

CVE andLocating the Packages That Have CVE Updates in Oracle Solaris

standards

overviewAbout Compliance in Oracle Solaris

T

tailor subcommand

required rights for usingRights to Run the compliance Command

useHow to Create a Tailoring From a Compliance Benchmark

tailorings

changing rule valuesHow to Select a Non-Default Value for a Rule in a Tailoring

creatingCreating Tailorings From Compliance Benchmarks

creating for KerberosCreating a Kerberos Tailoring From the Recommended Profile

creating from Recommended profileCreating a Kerberos Tailoring From the Recommended Profile

creating package manifestHow to Create a Package Manifest for a Tailoring

describedTailorings From Benchmarks

editingEditing Compliance Tailorings

excluding all rulesHow to Create a Tailoring From a Compliance Benchmark

exportingHow to Export a Tailoring

exporting updatedUpdating a Tailoring From an Export File

importingHow to Export a Tailoring

including and excluding rulesCreating a Kerberos Tailoring From the Recommended Profile

loadingLoading a Different Tailoring

pick screen andEditing Compliance Tailorings

updating outdatedHow to Update Tailorings Based on Previous Benchmark Versions

U

updating

outdated tailoringsHow to Update Tailorings Based on Previous Benchmark Versions

V

values

changing in compliance rulesHow to Select a Non-Default Value for a Rule in a Tailoring

values in tailorings

editingSelecting Alternate Values for Variables in Compliance Rules

variable values

compliance rules, inWhat's New in Compliance in Oracle Solaris 11.3

variables

changing in compliance rulesHow to Select a Non-Default Value for a Rule in a Tailoring

verifying

CVE fixes installedVerifying That a Fix for a CVE ID Is Installed

packages with CVE fixesManaging CVE Updates From the Command Line

Shellshock fix installedVerifying That a Fix for a CVE ID Is Installed

tailoring in stable storageHow to Create a Tailoring From a Compliance Benchmark

viewing

assessments locationLocating Files in the Compliance Repository

contents of benchmarks and profilesOracle Solaris Compliance Guides

CVE IDs in a critical patch updateListing the CVE IDs in a Critical Patch Update

latest CPU installedVerifying That the Latest CPU Is Installed

packages with a particular CVE fixSeveral Ways of Listing the Packages That Contain Fixes to a CVE ID

reportsHow to Run Assessments and Reports

X

XCCDF

export format

How to Create a Package Manifest for a Tailoring

How to Export a Tailoring

report formatAssessment Report Formats

XML report formatAssessment Report Formats