Solaris

Hi All,

Thanks in advance for reading and any posts.

I was wondering if anyone has come across or can recomend or has any security standards that we could implement. We are running production Oracle systems on Solaris 8 boxes (which are global). We are after security considerations specifically at operating system level - not oracle or network level (hence the post in a Solaris forum).

Any recommended standards or links would be welcomed.

Thanks again,

B14... aka... marky mark...

I have found the "NSA Guide to the Secure Configuration of Solaris 8" an excellent starting point for server hardening. There are numerous documents available from Sun on their SunSolve site but I'd start here.

http://www.nsa.gov/snac/downloads_all.cfm

Thanks for the replay, that looks insteresting I will have a read into it..

SA Magazine had an acticle about using JASS (Sun's Security Toolkit) and Titan (Opensource extensible hardening scripts) to secure a Solaris system.

The links for Titan are now broken, as someone has turned 'fish.com' into, well, a forum about fish. But you can find Titan at their commercial support site as a free download. Make sure you understand what each does. They can disable services your system actually needs to function as a web/app/db/NFS server.

Cheers,

Keith

thanks for your replay I will have a look into this...

b14... aka... marky mark...