Learning Solaris 10 Check out the Zones F.A.Q. !

Securing Applications With Identity Services, Part 1: Authentication 0

Posted on October 15th, 2007. About Security, Docs, JES, Access Mgr.

Written by an Open-SSO engineer.

Go to the article

New Solaris 10 security docs 0

Posted on October 11th, 2007. About s10 stories, Security, Docs.

Glenn Brunette, a Sun Solaris security advocate, has published new security docs :

A list of all the set-uid/setgid programs that ship with Solaris 10 08/07 with description : Go to the document
A good description of all security features of Solaris 10 08/08 with examples : Go to the document

Must-have link : (Open)Solaris Security Presentations 0

Posted on November 10th, 2006. About s10 stories, Security, Docs.

A bunch of pdfs written by various Sun Security Engineers. Quite up to date since some already contain information about Solaris 10 Update 3 ( 11/06 ).

Go to the webpage

T: Security, Solaris

Much to read on Intrusion Detection Systems 0

Posted on November 9th, 2006. About s10 stories, Security, Docs.

The Hacker’s choice, a well known, white hats hacker site just compiled a large set of documents about host-based attacks and network-based attacks.

Go to the website

Leveraging Security in the Native Platform Using Java SE 6 Technology 0

Posted on October 17th, 2006. About Security, JSE.

Go to the article

Using the Cryptographic Accelerator of the UltraSPARC T1 Processor blueprint 0

Posted on March 29th, 2006. About s10 stories, Security, Crypto Framework, Docs, Blueprints.

This Sun BluePrints article demonstrates how the combination of the Solaris 10 Operating System and the UltraSPARC T1 processor can be used to create a high performance, secure Web site. It provides a brief overview of SSL technology, as well as an introduction to the Solaris Cryptographic Framework. Configuration details are included for common security applications, such as Apache, the Sun Java System Web Server, and secure Java technology applications, enabling these programs to utilize NCP and KSSL technology. A performance study of secure Web applications is also included.

View the article

Solaris Crypt : better password hashing algorithms 0

Posted on January 19th, 2006. About Security, OpenSolaris.

From Solaris 9 update 2, a new framework was introduced that would make it possible to select among a number of hash algorithms the famous one that would be used to compute the encrypted version of the passwords. Before that time, the traditional crypt() routine was used, limiting the size of passwords to 8 characters and providing the even more famous 13 characters found in the /etc/shadow file.

The Solaris Pluggable Crypt Framework makes it possible to choose from 3 new algorithms, all allowing a maximal password size of 255 characters:

# cat /etc/security/crypt.conf
(…)
1 crypt_bsdmd5.so.1
2a crypt_bsdbf.so.1
md5 crypt_sunmd5.so.1

What are these libraries?

From the man pages: (more…)

Introduction to Intrusion Detection System with Snort 0

Posted on September 26th, 2005. About Security.

Bigadmin published a complete overview of what SNORT is and the way to start configuring it. Not enough for production but perfect to decide whether to investigate further or not…

Go to the article

T : ids, Snort

S10 Encryption supplement 0

Posted on April 15th, 2005. About Security.

This download gives you access to more secure (read larger keys) AES & Blowfish.

Go to the download

Lab : the user_attr database 0

Posted on March 8th, 2005. About Security, Security, labs, PRM - privileges.

Playing with user_attr database
========================

Last Edited : 16/02/2005

This paper is meant to illustrate the new possibilities of the /etc/user_attr database. Up to Solaris 9, the database could be used to assign RBAC profiles, roles and authorizations to users as well as a default project.
3 new parameters are introduced as of Solaris 10.

Go to the full exercise