Glenn Brunette's Security WeblogRambling musings and practical tips (mostly related to security).NEW: Hack-Fu - Deconstructing the Security Capabilities of the Solaris 10 OS- November 13, 2007 For the Sun CEC 2007 conference this year, I revamped my originalPractical Solaris 10 Security presentation that I had originally mentioned here. The new version of the presentation is titled Hack-Fu - Deconstructing the Security Capabilities of the Solaris 10 OS. While the title is a little more "catchy", the real change is that the presentation was enhanced to provide a more complete practical demonstration of Solaris 10 security capabilities. The presentation is structured from the...http://blogs.sun.com/gbrunett/entry/new_hack_fu_deconstructing_the NEW: Solaris Package Companion v0.7- November 2, 2007 This one must have slipped my mind. Please accept my apologies. Back in September (2007), I published an updated version of the Solaris Package Companion. For those not familiar with the tool, here is a brief overview: The Solaris Package Companion is a small Korn shell script that allows you to ask quite a number of interesting questions about the relationships between Solaris metaclusters, clusters and packages as well as their respective dependencies. Very often, answers...http://blogs.sun.com/gbrunett/entry/new_solaris_package_companion_v0 NEW: Solaris 10 Set-ID and World Writable Overview- November 2, 2007 Various organizations have often asked for more detail regarding the set-uid, set-gid and world writable programs that are shipped by the default in the Solaris OS. Well, the wait is over (at least for Solaris 10 807)! Today, I am happy to announce the public release of an overview document that describes these file system objects in detail. This document is still a draft and could still needs to answer a few questions, but I believe that it is far enough along to open up the discussion...http://blogs.sun.com/gbrunett/entry/new_solaris_10_set_id NEW: Solaris 10 Security Best Practices- November 2, 2007 It is with great pleasure that I can (albeit belatedly) announce the arrival of the latest security guidance from both Sun and the Center for Internet Security. Working together, in concert with representatives from academia, industry and government, we have published security guidance for Solaris 10 1106 and 807. This content represents the best and most complete form of Solaris security guidance ever produced. Not only are the recommendations based upon industry consensus but they are.http://blogs.sun.com/gbrunett/entry/new_solaris_10_security_best |