The strength of a cryptographic solution is not recommended to be into the obscurity of the algorithm, the most useful and most hard to break solutions are public algorithms, which everybody can see, for example PKI, CAST, PGP, all them are public.
So.. the obvious hard point of a security system is a strong password, they [...]

continue reading.....

The SMF (Service Management Facility) is an architected solution to slowly replace the traditional UNIX startup scripts, init run levels and the files located in /etc/rcX.d/ like in Linux. It is some kind of advanced chkconfig command existent in Linux. Some startup scripts still exist in /etc/rcX.d for retrocompatibility and compatibility with third [...]

continue reading.....

The program that permits to see network packets in Solaris is called snoop, it is some kind of tcpdump for Linux. I would like to show an example of how to view the network traffic between two systems:
# snoop saturn.com sun.com
sys41 -> sys42 ICMP Echo request (ID: 615 Sequence number: 0)
sys42 [...]

continue reading.....

In Solaris it is required a little of shell and adb hacking knowledge to get the Epoch time. The Epoch time is the number of seconds elapsed since midnight Coordinated Universal Time (UTC) of January 1, 1970, not counting leap seconds. It is widely used not only on Unix-like operating systems but also in [...]

continue reading.....

Solaris 10 Zones is an ideal solution for complex network architectures where may coexist several critical services, consolidating all the applications in a single server. Solaris Zones reduce management and hardware costs by simplifying the solution. The Zones have been created in SUN by Andrew Tucker, they are similar to FreeBSD jails. [...]

continue reading.....

I have written an article in another blog of mine that applies to all Unix. A good place for security education is the SANS/FBI site (http://www.sans.org/top20/). These are the most important Unix related security issues:
1. Web Server. One of the places that an intruder is going to check first is for vulnerabilities in your Apache [...]

continue reading.....

A secured Solaris Operating System can be measured with the Orange Book Security classification. But to begin explaining about that, i find interesting to share some interesting information about the Orange Book. The Orange Book is a document written by the US Department of Defense regarding Trusted Computer System Evaluation Criteria. The document [...]

continue reading.....

Up to the moment Solaris 10 can work with NIS+ or LDAP as enterprise directory for a network, Sun has in its plans to stop using NIS and keep on with LDAP in the future. In the network you can have multiple NIS serves, always only one Master and multiple slaves. The NIS [...]

continue reading.....

RBAC stands for Role Based Access Control, it is a security standard (among others thay exist). But this security standard is important for us because it is used by Solaris and by all the Unix/Posix Standard Operating Systems.
This Security Standard gives an organization the possibility to separate the superusers privilegues from the normal users, [...]

continue reading.....

The Solaris Zones provide many benefits to the Technological solution that is going to be deployed. One of this benefits is that a Network Service can run inside a Zone, and avoid a large damage in case of a security breach due a newly discovered exploit or worm. The affected Zone would not affect the [...]

continue reading.....