Re: Solaris Security Script

On 10.12-10:37, xyberpix wrote:
> Hi All,
>
> I'm working on a rather large Solaris security script, could you please
> all post your idea's in here or mail me directly for things that you would
> recommend checking for. 

NetBSD has a very convenient security facility that is configurable
by /etc/security.conf. You can look at the manpage at
  http://www.daemon-systems.org/man/security.conf.5.html
to get an idea.

What I like the most about it is the sense of 'recognizing, what's
going on' on my systems. If any of the watched files changes, I
get a diff, so I can double check my changes the next day when the
security mail arrives.
If nothing changes, the security report is empty, if anything
changes, I get the details.

This has also the added value of getting backups of important
files, in case I do something silly with one of them and want
a working version back.

I always wanted something like this on my solaris systems.

Chris

-- 
----------------------------------------------------------------------
Christoph Kaegi                                           kgc@zhwin.ch
----------------------------------------------------------------------