SN.1 Restrict access to suspend feature

MoyenneNiveau 2Revue manuellesolaris

Description

Solaris 11 does not enable the suspend capability by default and now uses the poweradm command to suspend the system. Bear in mind that users with physical access to a system can simply remove power from the machine if they are truly motivated to take the system off-line, and granting the capability to use poweradm may be a more graceful way of allowing desktop users to ...

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Perform the following to verify that the result is as recommended: # poweradm list | grep suspend suspend/suspend-enable current=false, smf=false

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Perform the following to implement the recommended state: # poweradm set suspend-enable=false # poweradm update

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: solarispermissions
Référence: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 10.1 SN.1 Restrict access to suspend feature