JASS

From My Admin Page
Jump to: navigation, search

Solaris Security Kit

  • Download and install "Solaris Security Toolkit" (Current version is 4.2) from here (docs)
  • CD to /opt/SUNWjass/Drivers/ and edit the hardening.driver file (if doesn't exist, there use example file in the same directory).
  • Insure the following lines are commented out (unless service will be needed):
# disable-keyboard-abort.fin
# disable-nfs-client.fin
# disable-picld.fin
# disable-rpc.fin
# disable-sendmail.fin
# enable-password-history.fin
# print-rhosts.fin
# set-user-password-reqs.fin
# enable-bsm.fin
# install-strong-permissions.fin
# enable-bart.fin
  • To run the script: /opt/SUNWjass/bin/jass-execute -d secure.driver
  • To audit: jass-execute -a secure.driver
  • To uninstall: jass-execute -u
  • After running JASS and before rebooting
  • If you need to be able to SSH into the box while setting it up then in /etc/ssh/sshd_config look for a line "PermitRootLogin no" and change it to be "PermitRootLogin yes". Be sure to set this back to no afterwards.
  • Make sure in /etc/hosts.allow there's a line "sshd: ALL"
  • Reboot the system