If the system is a firewall, ASET must be used on the system, and the firewall parameters must be set in /usr/aset/asetenv.

From SOLARIS 10 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE

Associated with IA controls: ECSC-1

Associated with: CCI-000032 CCI-000366 CCI-001298

SV-4309r2_rule If the system is a firewall, ASET must be used on the system, and the firewall parameters must be set in /usr/aset/asetenv.

Vulnerability discussion

ASET will not perform firewall tasks if it is not listed as a parameter in /usr/aset/asetenv.

Check content

Perform the following to determine if ASET is being used. # crontab -l |grep aset A returned entry would indicate ASET is being utilized. Determine if ASET is configured to check firewall settings. # grep TASKS /usr/aset/asetenv | grep firewall If an entry is not returned, this is a finding.

Fix text

If the system is used as a firewall and ASET is used, ensure the firewall parameter is configured in /usr/aset/asetenv.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.