Solaris Security

	See also...  Organization of the courses  Training sessions planning
Goals  Duration  Instructor(s)  Pre-requisite for attendants  Teaching method  Related courses  Material  Agenda  Methods of inscription

	This course is only available in intra-company session.

 

Solaris is doubtless the most widespread Unix system in professional environment. Its maturity and robustness make it a first class system for Internet access platforms, e-commerce platforms and many critical applications. However, Solaris is not a secure system by default and work is required in order to set up a Solaris system that will be accessed through a public network such as the Internet.

This course covers the security issues related to Solaris, so as to be able to install this system in a secure manner and maintain it afterwards.

2 days.

This practical and technical course is meant for Solaris administrators or for people having to deploy it in a secure manner.

Attendants must have a good knowledge of UNIX systems and Solaris administration.

Lecture, with numerous examples of practical applications.

  Course material [22 April 2002 - ]

Introduction

• Rappels historiques
• Risques encourus
• Exemples de problèmes récents

• OpenBoot PROM
• Installation
• Tâches post-installation
• Correctifs

• Suppression et ajout de packages
• Amélioration de la configuration par défaut
• cron et at
• Amélioration des journaux
• Comptabilité
• Audit

• Comptes
• Mots de passe
• Groupes

• Authentification des utilisateurs
• PAM
• Accès aux ressources
• ACL
• Kerberos

• Rappels sur les RPC
• NFS
• NIS
• NIS+

• Sécurité du système de fichiers
• Fichiers sensibles

• Principe
• Tripwire
• AIDE
• Où ?
• Solaris Fingerprint Database

• su
• sudo
• calife
• RBAC

• ASET
• JASS
• NTP

• SSH
• Durcissement réseau
• Filtrage IP
  • IPfilter
  • SunScreen

For registering an HSC course, please contact our training department by phone : +33 141 409 704 or by email at formations@hsc.fr, with first and last name of every student, your postal address and your company VAT number. Thoses informations enable us to send your the training agreement. The training agreement must be return agreed with signature and company stamp with you purchase order, at least 6 days before the course. The purchase order should precise your billing address and our payment regulations : net 30 days from our invoice date. Registration is completed as soon as we received those two documents.