Configuring Security on the Oracle Solaris 10 OS

This lesson describes the course overview

Lessons:

• Course goals

• Course agenda

• Introduction

• Your learning center

This lesson describes security principles and policies.

Lessons:

• Security principles

• The need for a security policy

• The need to securely configure systems

• The need for auditing

• The need for patching a system

This lesson describes the key security features of Oracle Solaris 10.

Lessons:

• Secure by Default

• Process Rights Management

• User Rights Management

• Solaris Cryptographic Framework

• Basic Audit Reporting Too

• Oracle Solaris Service Management Facility

• Solaris IP Filter

• Solaris Secure Shell

• IPsec and IKE

• Oracle Solaris Auditing

• Oracle Solaris Zones

• Oracle Solaris Trusted Extensions

This lesson describes a minimal installation.

Lessons:

• Describe a minimal installation

• Describe software installation clusters

• Compare reduced installation with minimal installation

• Lab:

• Construct a minimal OS configuration

• Using the Solaris Package Companion

• Installing, Configuring, and Testing the Apache2 Web Server

• Installing the Reduced Networking Metacluster

• Creating an SPC Repository (optional)

• Booting from the Minimized Operating System

• Installing and Verifying the Solaris SSH Client and Server

This lesson describes techniques and tools available for hardening the installation.

Lessons:

• Discuss what is involved when performing system hardening

• Use Secure by Default

• Use the Solaris Security Toolkit (SST)

• Identify the software components of SST

• Use SST for system hardening

• Lab:

• Use SST for system security audits

• Running Secure by Default

• Hardening the System

• Installing SST

• Undoing the Hardening Run

• Performing an Initial System Audit

• Configuring SST

Implementing Process Rights Management.

Lessons:

• Describe process rights management

• Describe process privileges

• Identify rights required by processes

• Describe how to debug privileges

• Assign minimum rights to a process

• Lab:

• Assigning default privileges to a system

• Using the ppriv command to examine process privileges

• Determining the privileges that a process requires

Lessons:

• Describe user access controls

• Discuss and use RoleBased Access Control (RBAC)

• Explain what is meant by a rights profile

• Describe and use a role

• Explain authorizations and privileges in RBAC

• Configure and use password history

• Configure password selection constraints

• Lab:

• Configure strong cryptographic algorithms for passwords

• Changing the root account to a role

• Adding a role to administer the Solaris Cryptographic Framework

• Using strong password encryption algorithms

• Adding a role to administer network security (optional)

• Configuring password history

• Configuring automatic account locking

This lesson describes the role of the Solaris Cryptographic Framework.

Lessons:

• Describe the role of the Solaris Cryptographic Framework

• Administer and maintain the Solaris Cryptographic Framework

• Explain and use the digest(1), mac(1), encrypt(1), and decrypt(1) commands

• Lab:

• Describe how Java applications, web servers, crypto accelerator cards, and the UltraSPARC T1, T2, and the SPARC T3 processors connect with the Solaris Cryptographic Framework

• Using the digest Command

• Managing the Cryptographic Framework

• Using the mac Command

• Using the encrypt and decrypt Commands

This lesson describes how to verify file integrity.

Lessons:

• Verify file integrity

• Describe and use the Basic Audit Reporting Tool (BART)

• Use the elfsign command to verify Solaris Executable and Linkable Format (ELF) objects

• Lab:

• Using BART to Examine Changes to the System

• Changing the root Account to a Role

• Customizing BART Manifests and Reports

• Adding the BART Software to the System

• Creating a Rights Profile for BART Operations

This lesson describes the Oracle Solaris Service Management Facility.

Lessons:

• Describe the Oracle Solaris Service Management Facility

• Describe the concept of least privilege

• Describe authorizations

• Limit a service’s privileges

• Examine a service’s current privileges

• Lab:

• Configuring the Apache2 Service

• Creating Role Accounts to Manage System Services

• Using the webadm Role

• Creating Authorizations to Use with the Apache Servi

This lesson describes network access control and methods available for increasing network security.

Lessons:

• Describe the methods for increasing network security

• Describe network access controls

• Explain TCP Wrappers in the Oracle Solaris 10

• Implement the Solaris IP Filter stateful packet filtering firewall

• Describe and use Solaris Secure Shell (Solaris SSH)

• Explain Kerberos security

• Describe the security features of NFSv4

• Lab:

• Using Solaris Secure Shell (Solaris SSH)

• Restricting Access to Services by Using TCP Wrappers

• Using the ssh-agent Program

• Starting Solaris IP Filter

• Using Solaris IP Filter

This lesson describes IP Security and the different ways it can be configured.

Lessons:

• Describe IP Security (IPsec) and the Internet Key Exchange (IKE) protocols

• Describe the various ways that IPsec can be configured

• Explain the two common ways to configure IKE

• Lab:

• Describe methods for troubleshooting IPsec and IKE configurations

• Securing All Traffic Between Two Hosts

• Disabling IPsec and IKE

• Adding IPsec Policies to Your Host

• Configuring IKE with SelfSigned Certificates

This lesson describes Oracle Solaris auditing is.

Lessons:

• Describe Oracle Solaris auditing

• Configure an audit policy

• Configure Oracle Solaris auditing

• Enable and disable auditing

• Protect audit information on a system and on a network

• Lab:

• Enabling Oracle Solaris Auditing

• Creating an Audit Management Role

• Examining the Audit Trail

• Configuring Oracle Solaris Auditing

• Disabling Oracle Solaris Auditing

• Configuring the syslog Plug-in

• Creating a Custom Audit Class

This lesson describes the security characteristics of Oracle Solaris with zones installed.

Lessons:

• Describe the security characteristics of Oracle Solaris with zones installed

• Discuss the differences between the subjects already covered and their application to Oracle Solaris with zones installed

• Describe the global zone

• Explain when and how to use zones

• Describe resource management in a zone

• Configure auditing on a system with zones

• Address zones and network security

• Lab:

• Discuss the issues around patching a zone

• Configuring the Installed Oracle Solaris Zones

• Auditing Oracle Solaris Zones

• Examining User and Process Rights Management in Oracle Solaris Zones

• Patching Oracle Solaris Zones

• Working with the SST and Oracle Solaris Zones

• Filtering IP Traffic with Oracle Solaris Zones

This lesson describes how security components work in Oracle Solaris.

Lessons:

• How security components work together

• How security components work together

• Infrastructure requirements