JASS
From My Admin Page
Solaris Security Kit
- Download and install "Solaris Security Toolkit" (Current version is 4.2) from here (docs)
- CD to /opt/SUNWjass/Drivers/ and edit the hardening.driver file (if doesn't exist, there use example file in the same directory).
- Insure the following lines are commented out (unless service will be needed):
- # disable-keyboard-abort.fin
- # disable-nfs-client.fin
- # disable-picld.fin
- # disable-rpc.fin
- # disable-sendmail.fin
- # enable-password-history.fin
- # print-rhosts.fin
- # set-user-password-reqs.fin
- # enable-bsm.fin
- # install-strong-permissions.fin
- # enable-bart.fin
- To run the script: /opt/SUNWjass/bin/jass-execute -d secure.driver
- To audit: jass-execute -a secure.driver
- To uninstall: jass-execute -u
- After running JASS and before rebooting
- If you need to be able to SSH into the box while setting it up then in /etc/ssh/sshd_config look for a line "PermitRootLogin no" and change it to be "PermitRootLogin yes". Be sure to set this back to no afterwards.
- Make sure in /etc/hosts.allow there's a line "sshd: ALL"
- Reboot the system