Excellent technical article written by Rich Teer. Shows latest PAM features of Solaris, including with the complete code of a PAM plug-in.
Go to the first article of the serie : user authentication basics
Another good introductory article for Solaris developers that want to learn how to use Solaris 10 privileges. Written by Rich Teer, author of the Solaris developer’s bible : Solaris System Programming.
Since Apache2 is an SMF service in Solaris 10, enabling SSH is about modifying a property of the Apache2 service in the SMF repository… And using “openssl” for key/certificate management.
Another good document from Glenn Brunette. Privilege bracketing for a process allows you to :
1. drop any privileges that it will never need;
2. enable the remaining privileges exactly when it needs them;
3. relinquishe the use of privileges when they are no longer needed
This Sun BluePrints article demonstrates how the combination of the Solaris 10 Operating System and the UltraSPARC T1 processor can be used to create a high performance, secure Web site. It provides a brief overview of SSL technology, as well as an introduction to the Solaris Cryptographic Framework. Configuration details are included for common security applications, such as Apache, the Sun Java System Web Server, and secure Java technology applications, enabling these programs to utilize NCP and KSSL technology. A performance study of secure Web applications is also included.
A new blueprint document from Glenn Brunette of Sun that describes a number of ways to find out which privilege is required to run a certain application as user “whatever”. Besides the known option of the ppriv command, the privdebug perl script uses DTrace to provide easy observation.
The author then uses privdebug to find out how to build the list of required privileges to start Apache as user “whatever”, be it in the Global zone or in non-global zones. A good document to learn about privileges.
View the document
The privdebug script at OpenSolaris
A easy-to-understand Howto found in OpenSolaris that describes how to implement privilege bracketing when developing privilege-aware software. The action of granting your process the privileges that it needs only when and for the exact duration it needs it.
T: OpenSolaris, privilegesThe next release of the Solaris Security Toolkit ( previously JASS ) free hardening tool is now available.
All the info and th download page is available on this link.
The release notes indicate what is new for Solaris 10. All new security features of Solaris 10 are covered, including SMF, IPFilter, Bart, the Crypto Framework,… It is even possible to harden zones !
A good new article written for developers and covering several aspects of the new security features of S10. Includes discussions about the Crypto Framework, PAM, GSS-API, SASL,…
All concepts are defined with clear diagrams, which make the document useful for more than just developers.