Perderabo,

The job before my current one was the security ideal. Anything that resided in the DMZ or next zone down was Trusted Solaris. The root account was a "role", not a user - thus no direct login from anywhere. RBAC ruled the day and had been extended to provide what sudo could and more. No access that was unencrypted was allowed. All other layers - app, transport, customer and database, thought not TS were setup in a similar fashion. Extensive auditing existed and maintained audit logs local and a a remote location so you could checksum to ensure that the audit trail was unaltered.

Security was tight, but organized well enough to never be an impediment to business.

Cheers,

Keith