The /etc/zones directory, and its contents, must have the vendor default owner, group, and permissions.

From Solaris 11 SPARC Security Technical Implementation Guide

Associated with: CCI-000366

SV-60769r1_rule The /etc/zones directory, and its contents, must have the vendor default owner, group, and permissions.

Vulnerability discussion

Incorrect ownership can result in unauthorized changes or theft of data.

Check content

This check applies to the global zone only. Determine the zone that you are currently securing. # zonename If the command output is "global", this check applies. Check the ownership of the files and directories. # pkg verify system/zones The command should return no output. If output is produced, this is a finding.

Fix text

This check applies to the global zone only. Determine the zone that you are currently securing. # zonename If the command output is "global", this check applies. The Software Installation profile is required. Change the ownership and permissions of the files and directories to the factory default. # pkg fix system/zones

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.