how to secure Solaris 10 Sparc
 

Hi all,

is there anybody knows how can I secure Solaris 10 Sparc ?

Do You know any good website with actual system holes and instructions how to secure ?

Last time somebody hacked my machine because SMTP settings were incorrect.

This is realy not flexible system like linux ... no updates... no informations on the websites... Maybe here I will find a good specialist which can help me ?


cheers

dlugasx

If you are looking for a "Linux-like" Solaris, you may want to go the OpenSolaris way instead of Solaris 10.
?
??

Back to the subject:

You can close all remote access to your machine except ssh with the "netservices limited" command.

For a complete security solution, have a look at:

http://opensolaris.org/os/project/sst/

Actually, that's not true. It's just that you are unfamiliar with it. There are typically a couple of full updates a year and frequent updates to the recommended and security patch clusters in between those.

To make sure you have the latest patches, go to http://sunsolve.sun.com/show.do?targ...s/patch-access (they actually changed this recently, and I had to use google to find it).

For general information on administration of Solaris systems, you want the sunsolve site, but you also want http://www.sun.com/bigadmin/home/index.jsp, and http://docs.sun.com/. The online documentation of Solaris is extremely thorough.

To secure Solaris (and lots of other things), I always go to http://www.nsa.gov/ia/guidance/secur...es/index.shtml, pick Operating Systems, and then Solaris 10. That is the most thorough and up-to-date guide available and is co-authored by Sun and the NSA.