<div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div dir="ltr" ><div style="text-autospace:none;" ><strong><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Product: </span></span></strong><br><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >IBM BigFix Compliance</span></span></div>
<div style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" > <br><strong>Title: </strong><br>Updated DISA STIG Checklist for <tt><span style="font-family:Arial;" >Solaris 10 </span></tt></span>to support a more recent version of benchmark</span></div>
<div style="text-autospace:none;" ><br><span style="font-family:Arial;" ><span style="font-size:11.0pt;" ><strong>Security Benchmark: </strong><br>Solaris 10</span><tt><span style="font-family:Arial;" > STIG</span></tt></span> Version 1, Release 18</div>
<div style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" > </span></span></div>
<div style="text-autospace:none;" ><strong><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Published Sites: </span></span></strong><br><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >DISA STIG Checklist for Solaris 10 – RG03, site version 8<br><em>(The site version is provided for air-gap customers.)</em></span></span></div>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" ><strong><span style="color:#2f2f2f;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Changelist:</span></span></span></strong></div>
<div style="text-autospace:none;" > </div>
<ul> <li style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >GEN007700 Removed.</span></span></li> <li style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >GEN001902 Fixed parameter that should be LD_PRELOAD, not LD_LOAD.</span></span></li> <li style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >GEN002280 Added some device files in /dev to default EXCLUDEFILES.</span></span></li> <li style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >GEN001840 $PATH is no longer allowed in PATH in initialization files.</span></span></li> <li style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >GEN001845 $LD_LIBRARY_PATH is no longer allowed in LD_LIBRARY_PATH<br> in initialization files.</span></span></li> <li style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >GEN001850 $LD_PRELOAD is no longer allowed in LD_PRELOAD in<br> initialization files.</span></span></li> <li style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >GEN000242 This check only applies to global zone.</span></span></li> <li style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >DISA has also updated various fixlet descriptions.</span></span></li></ul>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" ><strong><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Details:</span></span></span></strong></div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Both analysis and remediation checks are included</span></span></span></li></ul>
<div style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:.75in;text-autospace:none;" > </div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Some of the checks allow you to use the parameterized setting to enable customization for compliance evaluation. Note that parameterization and remediation actions require the creation of a custom site. </span></span></span> </li></ul>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" ><strong><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Actions to take:</span></span></span></strong></div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:#2f2f2f;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >If you are already subscribed to this site, no action is needed.</span></span></span></li></ul>
<div style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:.75in;text-autospace:none;" > </div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:#2f2f2f;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >To subscribe to the above site, you can use the License Overview Dashboard to enable and gather the site. Note that you must be entitled to the BigFix Compliance product and you must be using IBM BigFix version 9.2 and later. </span></span></span></li></ul>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" ><strong><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >More information: </span></span></span></strong><br><span style="font-family:Arial;" ><span style="font-size:11.0pt;" ><span style="color:black;" >To know more about the IBM BigFix Compliance SCM checklists, please see the following resources:</span></span></span></div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >IBM Developer Works:</span></span></span><br> <a href="https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/SCM%20Checklists" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/SCM%20Checklists</span></span></a></li></ul>
<div style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:1.0in;text-autospace:none;" > </div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >IBM BigFix Blog:</span></span></span><br> <a href="https://www.ibm.com/developerworks/community/blogs/a1a33778-88b7-452a-9133-c955812f8910?lang=en" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >https://www.ibm.com/developerworks/community/blogs/a1a33778-88b7-452a-9133-c955812f8910?lang=en</span></span></a></li></ul>
<div style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:1.0in;text-autospace:none;" > </div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >IBM BigFix Forum:</span></span></span><br> <a href="https://forum.bigfix.com/c/release-announcements/compliance" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >https://forum.bigfix.com/c/release-announcements/compliance</span></span></a></li></ul>
<div><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >We hope you find this latest release of SCM content useful and effective. Thank you!<br> <br><em> -- The IBM BigFix Compliance team</em></span></span></div></div></div><BR>