Index

A

administering
- assessments 1.7
- tagged assessments 2.4
alternate values in compliance rules 1.8.6
assessment options
- setting remotely 2.7
assessments
- asynchronous 2.6.2
- copying to remote store 2.5.2
- creating 1.7
- customized for security posture 1.8
- definition 1.2, 1.7
- deleting based on metadata 2.7, 2.8
- features 2.2
- formats of reports 1.6.1
- listing 1.7.1
- listing based on metadata 2.7, 2.8
- metadata and 2.4
- multiple systems, of 2.6.2.1, 2.6.2.2
- naming conventions 1.7.1, 1.8.2
- of security policy 1.7
- remote features 2.2
- report formats 1.6.1
- repository 1.7.1
- running at regular intervals 1.9
- running remote 2.6.2
- running remotely 2.6
- running with remote options set 2.7
- scheduled 1.9
- sending to remote store 2.5.1
- storing centrally 2.1
- storing locally 2.6.1
- storing remotely 2.6.1
- tagging 2.4
- using centrally stored 2.5
- verifying copied 2.5.1
assess subcommand
- remote use 2.6.1, 2.6.2
- required rights for using 1.5.1
- tagging with metadata 2.4
- updated tailoring 1.8.3
- use 1.7.2.1
asynchronous remote assessments 2.1, 2.6.2, 2.6.2.2
authenticating
- RAD with Secure Shell URI 2.3

B

Baseline profile
- secure by default and 1.3.1
- solaris benchmark 1.3.1
benchmark.profile guide contents 1.6.2
benchmark guide contents 1.6.2
benchmarks
- about 1.3
- CIS 1.3.3
- EHC 1.4
- guides for 1.6.2
- listing 1.7.1
- overview 1.2
- PCI DSS 1.3.2
- reports of compliance 1.6
- source of tailorings 1.8
- tailorings from 1.3.4

C

Center for Internet Security (CIS) 1.3.3
changing
- roster contents 2.6.2.1
- value of a rule 1.8.7
colons (:)
- when searching for CVE fixes 3.1.4
compliance
- about 1.2
- commands 1.5
- new features 1.1
- new features in this release 1.1
- Oracle Solaris Cluster and 1.1
- oscap command 1.2
- remote administration 1.1
- report formats 1.6.1, 1.7.1
- repository 1.7.1
- rules 1.5
- scripts 1.2
- setting policy in a roster 2.6.2.1
- tags 1.1
Compliance Assessor rights profile
- compliance command and 1.5.1
- tailorings and 1.8
compliance command
- assess subcommand 1.5.1, 1.7.2.1, 1.8.3, 2.6.1
- delete subcommand 1.5.1
- list subcommand 1.5.1, 1.7.2.1
- mounted file systems and 1.5
- RAD and 2.1
- report subcommand 1.5.1
- rights profiles and 1.5.1
- roster subcommand 2.6.2.1
- tailor subcommand 1.5.1, 1.8.2
compliance package 1.5.2
Compliance Reporter rights profile
- compliance command and 1.5.1
configuring
- RAD for remote compliance 2.3
- scheduled assessments 1.9
copying
- assessments based on metadata 2.8
- assessments to a common store 2.2.2
- assessments to remote store 2.5.2
creating
- assessments 1.7
- guides 1.6.3
- package manifest for a tailoring 1.8.5
- reports 1.7
- tailorings 1.8, 1.8.4
critical security updates
- administering 3.1
curses programming language
- tailorings and 1.8.1
CVE
- IPS packages and 3.1
- listing information about fixes 3.1.4
- listing packages with 3.1.4
- monitoring status 3.1.1
- packages and 3.1.2
- Shellshock software bug 3.1.4
- status in Oracle Solaris 3.1.1

D

delete subcommand
- required rights for using 1.5.1
deleting
- assessments based on metadata 2.8
- multiple assessments by name 2.8
DISA-STIG
- Oracle Solaris benchmarks and 1.3.1

E

editing tailorings 1.8.1
editing values in tailorings 1.8.6
ehc-solaris-policy package 1.4
Enterprise Health Check (EHC)
- benchmark 1.4
excluding
- all rules in a tailoring 1.8.2
- rules in a tailoring 1.8.4
explain subcommand 1.1
exporting
- rules with comments 1.8.4
- tailorings 1.8.4
- tailorings for package manifest 1.8.5
- updated tailoring 1.8.3
- XCCDF format 1.8.4, 1.8.5

F

formats
- of compliance reports 1.6.1
- of CVE searches 3.1.4
Free and Open Source (FOSS)
- locating CVE fixes in Oracle Solaris 3.1.2

G

guides
- creating 1.6.3
- of benchmarks and profiles 1.6.2

H

HTML report format
- example 1.6.1

I

identifying
- assessments based on metadata 2.8
importing
- rosters 2.6.2.1
- tailorings 1.8.4
including rules in a tailoring 1.8.4
installing
- compliance package 1.7.2
- solaris-11-cpu package 3.1.3

K

Kerberos
- creating tailoring for 1.8.4

L

listing
- assessment based on user tags 2.4
- assessments based on metadata 1.7.1, 2.8
- assessments remotely 2.7
- assessment system tags 2.4
- compliance information 1.7.1
- CVE information 3.1.4
- tagged assessments 2.4
list subcommand
- required rights for using 1.5.1
- use 1.7.1
loading tailorings 1.8.2
localization
- compliance and 1.2
locating
- assessments 1.7.1
log
- report name 1.6.1

M

metadata 1.1
- assessments and 1.7.1, 2.2.1
- listing tagged assessments 2.8
- system tags 2.4
- tagging assessments 2.4
- user-defined tags 2.4
monitoring
- CVE status 3.1.1
mounted file systems
- compliance command and 1.5
mounted home directories
- compliance command and 1.5

N

naming
- assessments 2.2.1
new features in this release 1.1

O

oscap command 1.2
OVAL
- compliance scripts and 1.2

P

package groups
- compliance package and 1.5.2, 1.7.2.1
- ehc-solaris-policy package and 1.4
package manifests
- tailorings, for 1.8.5
packages
- creating manifest for tailoring 1.8.5
- CVE and 3.1, 3.1.2
- pkg:/security/compliance 1.5.2
- pkg:/solaris/compliance/benchmark/ehc-solaris-policy 1.4
- pkg:/support/critical-patch-update/solaris-11-cpu 3.1.2
passphrase
- none for remote compliance 2.3.1, 2.3.2
password prompt
- troubleshooting 2.3.1
passwords
- verifying no prompt 2.3.1, 2.3.2
pci-dss guide 1.6.2
PCI DSS security policy
- benchmark 1.3.2
- guide 1.6.2
- pci-dss guide 1.6.2
- standard 1.2
pfexec command
- RAD and 2.5
pick screen
- tailorings and 1.8.1
pkg:/security/compliance
- installing 1.7.2
- package groups and 1.5.2, 1.7.2
pkg:/solaris/compliance/benchmark/ehc-solaris-policy
- package groups and 1.4
pkg:/support/critical-patch-update/solaris-11-cpu
- installing 3.1.2
plain text
- export format 1.8.4
- report format 1.6.1
policy
- changing remotely 2.7
- setting remotely 2.7
profiles
- definition 1.3.1
- guides for 1.6.2
- listing 1.7.1
- solaris benchmark, from 1.3.1
- tailorings and 1.3.4
public keys
- copying 2.3.2

R

RAD
- compliance command and 2.1
- configuring users to run remote compliance commands 2.3
- FQDN and 2.3
- pfexec command and 2.5
- remote compliance assessment and 2.1
- Secure Shell authentication method 2.3
- troubleshooting 2.3.1
- used by a local user 2.3.2
- used by an LDAP user 2.3.1
Recommended profile
- solaris benchmark 1.3.1
- use 1.7.2.1, 1.8.4
regular intervals
- running assessments 1.9
removing
- roster errors 2.6.2.1
renaming
- items in rosters 2.6.2.1
report.html
- report name 1.6.1
reporting compliance 1.6
reports
- creating 1.7
- file formats 1.6.1
- listing 1.7.1
- listing pathnames to 1.7.1
- naming conventions 1.7.2.1, 1.8.2
- of assessments 1.6.1
- of security policy 1.7
- repository 1.7.1
report subcommand
- required rights for using 1.5.1
- use 1.7.1
results.xccdf.xml
- report name 1.6.1
rights profile
- Service Configuration 1.9.1
rights profiles
- Compliance Assessor 1.5.1
- compliance command 1.5.1
- Compliance Reporter 1.5.1
- compliance -t command, and 1.8
- Software Installation 1.7.2.1
rosters
- canceling errors 2.6.2.1
- changing 2.6.2.1
- importing 2.6.2.1
- introduction 2.1
- naming 2.6.2.1
- renaming 2.6.2.1
- running 2.6.1
- scopes 2.6.2.1, 2.6.2.2
- setting compliance policy 2.6.2.1
- viewing contents 2.6.2.1
roster subcommand
- asynchronous assessments 2.6.2
- creating rosters 2.6.2.1
- interactive editor 2.6.2.1
rules
- changing variables in tailorings 1.8.7
- compliance and 1.5
- excluding all in a tailoring 1.8.2
- importing tailoring 1.8.4
- including and excluding in a tailoring 1.8.4
rules in tailorings
- parameterized 1.8.6
running
- assessments remotely 2.2.1
- remote assessments 2.6

S

SCAP
- tools 1.2
scopes in rosters 2.6.2.1, 2.6.2.2
Script Check Engine (SCE)
- security scripts and 1.2
scripts
- for compliance 1.3
- overview 1.2
- resources A.1
secure by default
- Baseline profile 1.3.1
Secure Shell
- no passphrase 2.3.1, 2.3.2
- RAD and 2.3
security policy
- assessments of 1.7
- benchmarks for 1.3
- customizing assessments 1.8
- setting in a roster 2.6.2.1
selecting
- assessments by metadata 2.2.1
sending
- assessments to a common store 2.2.2
- assessments to remote store 2.5.1
Service Configuration rights profile 1.9.1
Shellshock software bug
- listing packages with fix 3.1.4
- verifying fix is installed 3.1.4
solaris
- benchmark 1.3.1
- guide 1.6.2
solaris_pci-dss guide 1.6.2
solaris.Baseline
- default compliance security policy 1.9
solaris.baseline guide 1.6.2
solaris.recommended guide 1.6.2
solaris-11-cpu package 3.1.2
solaris benchmark
- basis for tailoring that changes value of a rule 1.8.7
Solaris security policies
- basis for tailorings 1.8
- solaris.Baseline default 1.9
- solaris benchmark 1.3.1
- solaris guides 1.6.2
SRUs
- CVE and 3.1.2
ssh-agent daemon 2.3.1
standards
- overview 1.2
storage
- assessments and reports 1.7.1
- central compliance assessments 2.1
- local 2.6.1
- pathnames 1.7.1
- remote 2.6.1
- remote, of assessments 2.2.1
- using common for assessments 2.5

T

tagging
- assessments 2.4
- assessments by metadata 2.2.1
- assessments with metadata 2.4
tags
- compliance parameters 1.1
tailorings
- changing rule values 1.8.7
- creating 1.8
- creating for Kerberos 1.8.4
- creating from Recommendedprofile 1.8.4
- creating package manifest 1.8.5
- described 1.3.4
- editing 1.8.1
- excluding all rules 1.8.2
- exporting 1.8.4
- exporting updated 1.8.3
- importing 1.8.4
- including and excluding rules 1.8.4
- loading 1.8.2
- pick screen and 1.8.1
- updating outdated 1.8.3
- viewing contents 1.8.2
tailor subcommand
- required rights for using 1.5.1
- use 1.8.2
troubleshooting
- password prompt 2.3.1

U

updating
- outdated tailorings 1.8.3
URI format
- RAD 2.3
users
- LDAP using RAD 2.3.1
- local user using RAD 2.3.2

V

values
- changing in compliance rules 1.8.7
values in tailorings
- editing 1.8.6
variables
- changing in compliance rules 1.8.7
verifying
- assessment copied 2.5.1
- assessments copied 2.5.2
- CVE fixes installed 3.1.4
- no password prompt 2.3.1, 2.3.2
- packages with CVE fixes 3.1.4
- Shellshock fix installed 3.1.4
viewing
- assessments location 1.7.1
- contents of benchmarks and profiles 1.6.2
- contents of tailoring 1.8.2
- CVE IDs in a critical patch update 3.1.4
- latest CPU installed 3.1.4
- packages with a particular CVE fix 3.1.4
- reports 1.7.2.1
- roster contents 2.6.2.1

X

XCCDF
- export format 1.8.4, 1.8.5
- report format 1.6.1
XML report format 1.6.1