Re: Securing Solaris 10

Young, Randy wrote:

> To start with the CISecurity Benchmark and testing tool are excellent.
> We have a lot of input from various communities helping to design that,
> and we do have Sun Systems Engineers on the team as well.
>
> Sun also has some excellent Blueprints books on this, and they do have
> their own securing utility, JASS, that you may want to take a look at.

Information on JASS (whose formal name is Solaris Security Toolkit (SST)) 
is available at:

  http://www.sun.com/security/jass

My team is working on an update for Solaris 10 update coming out later this 
year right now.

HTH, Alex

> Randy  
>
>
> > -----Original Message-----
> > From: listbounce@securityfocus.com 
> > [mailto:listbounce@securityfocus.com] On Behalf Of 
> > jeffnjillian@gmail.com
> > Sent: Wednesday, October 18, 2006 9:11 AM
> > To: focus-sun@securityfocus.com
> > Subject: Securing Solaris 10
> >
> > All,
> >
> > Has anyone out there found a good checklist or tool for 
> > securing Solaris 10? I found the CISecurity benchmark, but I 
> > didn't know if there was anything else out there? I'm not 
> > very well versed on Solaris, but I have the task of double 
> > checking the admins to ensure it was locked down.  I haven't 
> > seen very many checklists posted for this version of Solaris yet.
> >
> > Any suggestions?
> >
> > Thanks in Advance,
> > Jeff