Solaris 10 and C2 Level Security Books?

as400 · 02-09-2008, 12:25 AM

Hi,

Is there some administration books that explains how to make a Solaris 10 OS to become C2 or C3 level-security certified?

thx

bsdunix · 02-14-2008, 08:30 PM

If you search the Sun site for C2 and Solaris information you'll find documents that require support contract access to view them.

This is the only open access one relating to C2 setup I could find:

Auditing in the Solaris™ 8 Operating Environment

The Solaris™ Operating Environment (Solaris OE) provides the capability to log the activity on a system at a granular level. This logging or auditing ability is part of the SolarisOE SunSHIELD™ Basic Security Module (BSM). These auditing capabilities were added to provide the features required by the Trusted Computer System Evaluation Criteria (TCSEC) to a security level referred to as C2.

http://onesearch.sun.com/search/clic...l=all-filtered

This Sun article says:

Solaris 10 Security Feature Checklist

"Basic Security Module (BSM auditing stuff)" "C2-compliant auditing trail" is bundled with Solaris 10.

http://blogs.sun.com/alecm/resource/s10-checklist.html

According to the table of contents, this book discusses C2:

Hack Proofing Sun Solaris 8
http://www.google.com/products?q=192899444X

and then there's this article:

Implementing C2 Auditing in the Solaris Environment
http://www.samag.com/documents/s=115...013d/0013d.htm

And then there's Common Criteria certification for Solaris 10.

http://blogs.sun.com/jimlaurent/entr...at_is_a_common

Happy reading