Solaris Security Toolkit and Solaris 10

View: New views
8 Messages — Rating Filter:   Alert me  

Solaris Security Toolkit and Solaris 10

by Roland Cruesemann :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hello,

the lastest  version, 4.1,  of the Solaris Security Toolkit  supports
the Solaris OS only up to version 9.
What is with Solaris 10?

Best regards,
Roland Cruesemann


smime.p7s (4K) Download Attachment

Re: Solaris Security Toolkit and Solaris 10

by James Pratt-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Looks like they are working on it, sounds like it should be ready soon?...

http://forum.sun.com/thread.jspa?threadID=23618&messageID=86518

regards,
jamie

--

James Pratt
Unix Systems Administrator
Norwich University
http://www.norwich.edu
<jpratt@...> | ph. (802)485-2532


Roland Cruesemann wrote:
> Hello,
>
> the lastest  version, 4.1,  of the Solaris Security Toolkit  supports
> the Solaris OS only up to version 9.
> What is with Solaris 10?
>
> Best regards,
> Roland Cruesemann

Re: Solaris Security Toolkit and Solaris 10

by David R Hartley :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

In the meantime:
http://www.cisecurity.org/bench_solaris.html
has a new security benchmark for Solaris 10

--- Jamie Pratt <jpratt@...> wrote:

> Looks like they are working on it, sounds like it
> should be ready soon?...
>
>
http://forum.sun.com/thread.jspa?threadID=23618&messageID=86518

>
> regards,
> jamie
>
> --
>
> James Pratt
> Unix Systems Administrator
> Norwich University
> http://www.norwich.edu
> <jpratt@...> | ph. (802)485-2532
>
>
> Roland Cruesemann wrote:
> > Hello,
> >
> > the lastest  version, 4.1,  of the Solaris
> Security Toolkit  supports
> > the Solaris OS only up to version 9.
> > What is with Solaris 10?
> >
> > Best regards,
> > Roland Cruesemann
>


Parent Message unknown Re: Solaris Security Toolkit and Solaris 10

by Neil Verkland :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Solaris 10 has guaranteed backward compatibility with all Solaris 9
apps, so go ahead and use the old version for now.
 
>>> Jamie Pratt <jpratt@...> 6/13/2005 8:12:53 AM >>>
Looks like they are working on it, sounds like it should be ready
soon?...

http://forum.sun.com/thread.jspa?threadID=23618&messageID=86518 

regards,
jamie

--

James Pratt
Unix Systems Administrator
Norwich University
http://www.norwich.edu 
<jpratt@...> | ph. (802)485-2532


Roland Cruesemann wrote:
> Hello,
>
> the lastest  version, 4.1,  of the Solaris Security Toolkit
supports
> the Solaris OS only up to version 9.
> What is with Solaris 10?
>
> Best regards,
> Roland Cruesemann

Neil S. Verkland, B.Sc.C.S.
Manager, Learning and Information Systems
Grant MacEwan College

Parent Message unknown Re: Solaris Security Toolkit and Solaris 10

by James Pratt-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

So,,,, Are you saying you've actually gotten JASS to work right on sol
10, or is this just a generalized compatibility statement? ...
Personally, I haven't tried it yet, but it sounds like I don't even want
to anyhow, judging by google searches, and this list-serv... :-(

regards,
jamie

Neil Verkland wrote:

> Solaris 10 has guaranteed backward compatibility with all Solaris 9
> apps, so go ahead and use the old version for now.
>  
>
>>>>Jamie Pratt <jpratt@...> 6/13/2005 8:12:53 AM >>>
>
> Looks like they are working on it, sounds like it should be ready
> soon?...
>
> http://forum.sun.com/thread.jspa?threadID=23618&messageID=86518 
>
> regards,
> jamie
>
> --
>
> James Pratt
> Unix Systems Administrator
> Norwich University
> http://www.norwich.edu 
> <jpratt@...> | ph. (802)485-2532
>
>
> Roland Cruesemann wrote:
>
>>Hello,
>>
>>the lastest  version, 4.1,  of the Solaris Security Toolkit
>
> supports
>
>>the Solaris OS only up to version 9.
>>What is with Solaris 10?
>>
>>Best regards,
>>Roland Cruesemann
>
>
> Neil S. Verkland, B.Sc.C.S.
> Manager, Learning and Information Systems
> Grant MacEwan College
>

Re: Solaris Security Toolkit and Solaris 10

by Alex Noordergraaf :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


End of July is our current planned release date. Unfortunately can't get
  it out any earlier then that.

HTH, Alex

Jamie Pratt wrote:

> Looks like they are working on it, sounds like it should be ready soon?...
>
> http://forum.sun.com/thread.jspa?threadID=23618&messageID=86518
>
> regards,
> jamie
>
> --
>
> James Pratt
> Unix Systems Administrator
> Norwich University
> http://www.norwich.edu
> <jpratt@...> | ph. (802)485-2532
>
>
> Roland Cruesemann wrote:
>
>>Hello,
>>
>>the lastest  version, 4.1,  of the Solaris Security Toolkit  supports
>>the Solaris OS only up to version 9.
>>What is with Solaris 10?
>>
>>Best regards,
>>Roland Cruesemann


Parent Message unknown Re: Solaris Security Toolkit and Solaris 10

by Neil Verkland :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I'm taking the "Company Line" on this one. My local Sun guru used the
statement on me. I haven't actually dug in there. I had the same
question for him. I don't believe he actually tried it either.....

Neil S. Verkland, B.Sc.C.S.
Manager, Learning and Information Systems
Grant MacEwan College

>>> Jamie Pratt <jpratt@...> 6/13/2005 11:03:59 AM >>>
So,,,, Are you saying you've actually gotten JASS to work right on sol
10, or is this just a generalized compatibility statement? ...
Personally, I haven't tried it yet, but it sounds like I don't even
want
to anyhow, judging by google searches, and this list-serv... :-(

regards,
jamie

Neil Verkland wrote:

> Solaris 10 has guaranteed backward compatibility with all Solaris 9
> apps, so go ahead and use the old version for now.
>  
>
>>>>Jamie Pratt <jpratt@...> 6/13/2005 8:12:53 AM >>>
>
> Looks like they are working on it, sounds like it should be ready
> soon?...
>
> http://forum.sun.com/thread.jspa?threadID=23618&messageID=86518 
>
> regards,
> jamie
>
> --
>
> James Pratt
> Unix Systems Administrator
> Norwich University
> http://www.norwich.edu 
> <jpratt@...> | ph. (802)485-2532
>
>
> Roland Cruesemann wrote:
>
>>Hello,
>>
>>the lastest  version, 4.1,  of the Solaris Security Toolkit
>
> supports
>
>>the Solaris OS only up to version 9.
>>What is with Solaris 10?
>>
>>Best regards,
>>Roland Cruesemann
>
>
> Neil S. Verkland, B.Sc.C.S.
> Manager, Learning and Information Systems
> Grant MacEwan College
>

Re: Solaris Security Toolkit and Solaris 10

by Glenn Brunette :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


Neil, Jamie,

You should not use the Solaris Security Toolkit (version 4.1 or older)
on Solaris 10.  While the code may technically run, it will not do
what you expect.  This is because the Solaris Security Toolkit (version
4.1 or older):

    (1) does not know about the Solaris 10 Service Management Facility:

           http://www.sun.com/bigadmin/content/selfheal/

        As such, many of the services typically disabled/enabled/modified
        by JASS will be unchanged after a JASS run.

    (2) does not know anything about zones so using copy of the Toolkit
        may result in error and/or warning messages when you attempt to
        run it in a local zone.

    (3) does not know about any new services that have been introduced
        in Solaris 10 (as such there are no audit/finish scripts for
        them).

There may be other issues as well, but there are the big highlights.
Solaris 10 will officially support Solaris 10 with its 4.2 release
that is expected soon.

Also, someone mentioned the CIS Solaris 10 Benchmark.  It is true
that the Solaris 10 Benchmark from CIS has been released.  In fact,
Sun actively worked with CIS on the development of this Benchmark.
It should be noted however that the CIS scoring tool for Solaris 10
is not yet available either.

g

--
Glenn Brunette
DE & Chief Security Architect, Client Solutions
Sun Microsystems, Inc.


Neil Verkland wrote:

> I'm taking the "Company Line" on this one. My local Sun guru used the
> statement on me. I haven't actually dug in there. I had the same
> question for him. I don't believe he actually tried it either.....
>
> Neil S. Verkland, B.Sc.C.S.
> Manager, Learning and Information Systems
> Grant MacEwan College
>
>
>>>>Jamie Pratt <jpratt@...> 6/13/2005 11:03:59 AM >>>
>
> So,,,, Are you saying you've actually gotten JASS to work right on sol
> 10, or is this just a generalized compatibility statement? ...
> Personally, I haven't tried it yet, but it sounds like I don't even
> want
> to anyhow, judging by google searches, and this list-serv... :-(
>
> regards,
> jamie
>
> Neil Verkland wrote:
>
>>Solaris 10 has guaranteed backward compatibility with all Solaris 9
>>apps, so go ahead and use the old version for now.
>>
>>
>>
>>>>>Jamie Pratt <jpratt@...> 6/13/2005 8:12:53 AM >>>
>>
>>Looks like they are working on it, sounds like it should be ready
>>soon?...
>>
>>http://forum.sun.com/thread.jspa?threadID=23618&messageID=86518 
>>
>>regards,
>>jamie
>>
>>--
>>
>>James Pratt
>>Unix Systems Administrator
>>Norwich University
>>http://www.norwich.edu 
>><jpratt@...> | ph. (802)485-2532
>>
>>
>>Roland Cruesemann wrote:
>>
>>
>>>Hello,
>>>
>>>the lastest  version, 4.1,  of the Solaris Security Toolkit
>>
>>supports
>>
>>
>>>the Solaris OS only up to version 9.
>>>What is with Solaris 10?
>>>
>>>Best regards,
>>>Roland Cruesemann
>>
>>
>>Neil S. Verkland, B.Sc.C.S.
>>Manager, Learning and Information Systems
>>Grant MacEwan College
>>

LightInTheBox - Buy quality products at wholesale price