Re: Securing Solaris 10

James Craig wrote:
> 
> 	I have been playing with Solaris 10 on a few of my machines before
> 	letting it loose in the wild (ie, the labs).
> 
> 	I am looking for any best-practice guides for services run by
> 	smf that can be turned off, and if there is a way that I can
> 	create a profile that I could propogate to 150+ machines or
> 	through jumpstart ..
> 
> 	.. any insight is appreciated.

<begin plug>

Well, if you are looking for something that can propogate security 
profiles through JumpStart seems like you should take a look at JASS 
(aka Solaris Security Toolkit) v4.2. Support for Solaris 10 is included 
in this release which was just released this past Thursday (7/29). You 
can integrate it into you JumpStart environment quite easily and push 
your custom-developed security profiles (aka drivers) that way.

URL is http://sun.com/security/jass

<end plug>

HTH, Alex

> 
> jim craig
>