Solaris Security: Additional Packages

Optional Solaris Packages:


The following packages can enhance the security of your system by increasing logging, auditing, or can increase your functionality.
 
Source Package Description Comment
Sage SUNWlibCf SPARCompilers Bundled libC Cfront version For showrev support
SUNWadmc System administration core libraries  
SUNWadmfwSystem & Network Administration Framework  
SUNWadmj Admin/Install Java Extension Libraries 
SUNWter Terminal Information Terminal emulation support 
 
Spitzner (old) SUNWadmc System administration core libraries  
SUNWadmfw System & Network Administration Framework  
SUNWdoc Documentation Tools  
SUNWmanOn-Line Manual Pages  
SUNWgzip The GNU Zip (gzip) compression utility  
 
Spitzner-new SUNWbashGNU Bourne-Again shell (bash)  
SUNWbzipThe bzip compression utility Compression Utilities
SUNWbzipxThe bzip compression library (64-bit)  
SUNWgzipThe GNU Zip (gzip) compression utility  
SUNWzip The Info-Zip (zip) compression utility  
SUNWdoc Documentation Tools Man Pages
SUNWman On-Line Manual Pages  
SUNWntpuNTP, (Usr) NTP Support
SUNWntpr NTP, (Root)  
SUNWtoo Programming Tools Truss and other troubleshooting tools.
SUNWtooxProgramming Tools (64-bit)  
SUNWfnsFederated Naming System Snoop sniffing utility
SUNWfnsxFederated Naming System (64-bit)  
SUNWxcu4XCU4 Utilities For Secure Shell X Tunneling
SUNWxcu4xXCU4 Utilities (64-bit)  
SUNWxwpltX Window System platform software  
SUNWxwplxX Window System library software (64-bit)  
SUNWxwrtl X Window System & Graphics Runtime Library Links in /usr/lib  
SUNWxwrtx X Window System Runtime Compatibility Package (64-bit)  
 
Solaris Minimization: SUNWntprNTP, (Root)  
SUNWntpuNTP, (Usr)  
 
Other Packages SUNWaccrSystem Accounting, (Root)System and Process Accounting
SUNWaccuSystem Accounting, (Usr) 
SUNWastAutomated Security Enhancement ToolsASET will provide security reports &optionally fix them.


Application-Specific Package Dependencies

There will be additional application-dependent packages you will need to install. For example, SUNWlibC, SUNWter, and SUNWscpu are required for fw1 (Source: Spitzner).Ip filter will require SUNWhea, SUNWsrh, SUNWbtool, SUNWscpu, SUNWtoo, SUNWlibm, SUNWsprot, and SUNWarc (Source: Unix Circle).



Startup Files

Many of the packages you left on the system install services which you may not need. For example, SUNWcsr installs scripts which start up services such as cachefs and NFS. If you do not need these services, you should disable these startup files. If you are unsure what each startup service does, read our article. can be disabled, read our latest article. Other discussions of startup files include: Securityfocus, roble, Univ of Waterloo (which has a good discussion of services, also a script to shut them off), Sage, sabernet, or study one of the hardening programs, such as Titan or YASSP's post installation steps.
.

References

Spitzner: http://www.enteract.com/~lspitz/core8.txt, http://www.enteract.com/~lspitz/armoring2.html

Security Focus: http://www.securityfocus.com/focus/sun/articles/install.html

Solaris Minimization: http://www.sun.com/software/solutions/blueprints/1100/minimize-updt1.pdf

Roble: http://www.roble.com/docs/secure_solaris.html

Sage: http://www.usenix.org/sage/sysadmins/solaris/solaris/os.html#minimal

Unix Circle: http://www.unixcircle.com/features/BuildingSolarisFW.php

Univ of Waterloo: http://www.ist.uwaterloo.ca/security/howto/2000-09-19.html

Sabernet: http://www.sabernet.net/papers/Solaris.html

Titan: http://www.fish.com/titan.
Back to Index






MGMG Articles:
(C)Copyright 2002-2005 David Glosser
mgmg_interactive12345@hotmail.com (remove all numbers from email address).
Please read disclaimer.
Back to Index