<div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div dir="ltr" ><div style="text-autospace:none;" ><strong><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Product: </span></span></strong><br><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >IBM BigFix Compliance</span></span></div>
<div style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" > <br><strong>Title: </strong><br>Updated DISA STIG Checklist for <tt><span style="font-family:Arial;" >Solaris 11 </span></tt></span>to support a more recent version of benchmark</span></div>
<div style="text-autospace:none;" ><br><span style="font-family:Arial;" ><span style="font-size:11.0pt;" ><strong>Security Benchmark: </strong><br>Solaris 11</span><tt><span style="font-family:Arial;" > STIG</span></tt></span> Version 1, Release 11</div>
<div style="text-autospace:none;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" > </span></span></div>
<div style="text-autospace:none;" ><strong><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Published Sites: </span></span></strong><br><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >DISA STIG Checklist for Solaris 11, site version 4<br><em>(The site version is provided for air-gap customers.)</em></span></span></div>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" ><strong><span style="color:#2f2f2f;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Changelist:</span></span></span></strong></div>
<div style="text-autospace:none;" > </div>
<ul> <li><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >SOL-11.1-020350 Added /etc/rc*/* files to be checked.</span></span></li> <li><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >SOL-11.1-070130 Added sshd to list of system users.</span></span></li> <li><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >SOL-11.1-080030 Only check for aslr being enabled in sxadm output.</span></span></li> <li><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >SOL-11.1-100020 Exclude any Kernel zones found from the list of<br> local zones.</span></span></li> <li><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >SOL-11.1-040315 Newly added.</span></span></li> <li><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >SOL-11.1-040316 Newly added.</span></span></li> <li><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >DISA has also updated various fixlet descriptions.</span></span></li></ul>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" ><strong><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Details:</span></span></span></strong></div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Both analysis and remediation checks are included</span></span></span></li></ul>
<div style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:.75in;text-autospace:none;" > </div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Some of the checks allow you to use the parameterized setting to enable customization for compliance evaluation. Note that parameterization and remediation actions require the creation of a custom site. </span></span></span> </li></ul>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" ><strong><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >Actions to take:</span></span></span></strong></div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:#2f2f2f;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >If you are already subscribed to this site, no action is needed.</span></span></span></li></ul>
<div style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:.75in;text-autospace:none;" > </div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:#2f2f2f;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >To subscribe to the above site, you can use the License Overview Dashboard to enable and gather the site. Note that you must be entitled to the BigFix Compliance product and you must be using IBM BigFix version 9.2 and later. </span></span></span></li></ul>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" > </div>
<div style="text-autospace:none;" ><strong><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >More information: </span></span></span></strong><br><span style="font-family:Arial;" ><span style="font-size:11.0pt;" ><span style="color:black;" >To know more about the IBM BigFix Compliance SCM checklists, please see the following resources:</span></span></span></div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >IBM Developer Works:</span></span></span><br> <a href="https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/SCM%20Checklists" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/SCM%20Checklists</span></span></a></li></ul>
<div style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:1.0in;text-autospace:none;" > </div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >IBM BigFix Blog:</span></span></span><br> <a href="https://www.ibm.com/developerworks/community/blogs/a1a33778-88b7-452a-9133-c955812f8910?lang=en" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >https://www.ibm.com/developerworks/community/blogs/a1a33778-88b7-452a-9133-c955812f8910?lang=en</span></span></a></li></ul>
<div style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:1.0in;text-autospace:none;" > </div>
<ul> <li style="margin-top:6.0pt;margin-right:0in;margin-bottom:6.0pt;text-autospace:none;" ><span style="color:black;" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >IBM BigFix Forum:</span></span></span><br> <a href="https://forum.bigfix.com/c/release-announcements/compliance" ><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >https://forum.bigfix.com/c/release-announcements/compliance</span></span></a></li></ul>
<div><span style="font-family:Arial;" ><span style="font-size:11.0pt;" >We hope you find this latest release of SCM content useful and effective. Thank you!<br> <br><em> -- The IBM BigFix Compliance team</em></span></span></div></div></div></div><BR>