Oracle Solaris System Administration (MOSC)

MOSC Banner

Applied the changes, but compliance framework still fail the configuration

edited Mar 9, 2016 2:12AM in Oracle Solaris System Administration (MOSC) 11 commentsAnswered

I tried to follow the Solaris 11 compliance baseline to harden the OS. I find some of the items, they will remain "fail" even if I apply the recommended fixes and even reboot the server. Those items include but not limited to the following:

1. coreadm(1M) configuration is correct

2. The maximum number of half-open TCP connections is at least 4096

3. The maximum number of waiting TCP connections is set to at least 1024

4. mesg(1) prevents talk(1) and write(1) access to remote terminals

5. Service svc:/network/ipfilter is enabled

6. A few items related to password configuration like "Password history logs the last ten passwords"

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center