Re: Securing Solaris 10

Young, Randy wrote:

> To start with the CISecurity Benchmark and testing tool are excellent.
> We have a lot of input from various communities helping to design that,
> and we do have Sun Systems Engineers on the team as well.
> 
> Sun also has some excellent Blueprints books on this, and they do have
> their own securing utility, JASS, that you may want to take a look at.

Information on JASS (whose formal name is Solaris Security Toolkit (SST)) is available at:

   http://www.sun.com/security/jass

My team is working on an update for Solaris 10 update coming out later this year right now.

HTH, Alex

> 
> Randy  
> 
> 
>>-----Original Message-----
>>From: [email protected] 
>>[mailto:[email protected]] On Behalf Of 
>>[email protected]
>>Sent: Wednesday, October 18, 2006 9:11 AM
>>To: [email protected]
>>Subject: Securing Solaris 10
>>
>>All,
>>
>>Has anyone out there found a good checklist or tool for 
>>securing Solaris 10? I found the CISecurity benchmark, but I 
>>didn't know if there was anything else out there? I'm not 
>>very well versed on Solaris, but I have the task of double 
>>checking the admins to ensure it was locked down.  I haven't 
>>seen very many checklists posted for this version of Solaris yet.
>>
>>Any suggestions?
>>
>>Thanks in Advance,
>>Jeff
>>
>>