Wednesday, July 16, 2008

Solaris Security Toolkit

Today I have been looking into Solaris Security Toolkit (what used to be called JASS) in more depth.

It is a frightening array of scripts to automatically configure your Solaris system to be more secure which makes it part of hardening. It is ideally suited to installing and running on a new system but more more worrying on an already installed, configured and live system.

With scripts calling scripts which call scripts, it's not a trivial task to know exactly what will happen when you hit the go button.

I've attempted to explain here: http://unixtraining.googlepages.com/security
Just click on the SST link.

Paxo

No comments: