Solaris Security Toolkit

Today I have been looking into Solaris Security Toolkit (what used to be called JASS) in more depth.

It is a frightening array of scripts to automatically configure your Solaris system to be more secure which makes it part of hardening. It is ideally suited to installing and running on a new system but more more worrying on an already installed, configured and live system.

With scripts calling scripts which call scripts, it's not a trivial task to know exactly what will happen when you hit the go button.

I've attempted to explain here: http://unixtraining.googlepages.com/security
Just click on the SST link.

Paxo

Solaris x86

Spent the day today at Sun Microsystems with a few other trainers focusing on the differences of teaching Solaris system administration courses on x86 hardware.

The course was good and cleared up a few grey areas about the order files are looked for at boot time (like the exact location of the two parts of GRUB). Problem is, the Sun Certification exams were written when Solaris 10 was still using the Device Configuration Assistant (loading DOS drivers at boot time) so the old way and new way have to be taught. New exam questions are needed!

As far as teaching on x86 hardware, well I'm not too bothered as it has little effect on me (the hardware is usually faster for what I do) but I know that most students have SPARC hardware at work and would prefer that.