Oracle Solaris 11 System Administration

This lesson provides an introduction to the course and the course environment.

Lesson Topics:

• Course goals

• Course Agenda

• Introductions

• Your lab environment

This lesson provides an overview of the considerations, process and tasks involved in evaluating an organisations security policies and needs.

Lesson Topics:

• Security principles

• The purpose of a security policy

• The need to securely configure systems

• The need for auditing

• The need for upgrading a system

This lesson will teach you about important security technologies of Oracle Solaris 11 OS that you must implement to create a secured environment at your company.

Lesson Topics:

• Introducing the Oracle Solaris 11 Operating System

• Exploring Oracle Solaris 11 security technologies

This lesson teaches you about how to manage roles, rights profiles, and privileges of various users in a company.

Lesson Topics:

• Plan for user rights and process rights implementation

• Describe RBAC, its elements and databases

• List commands required to assign rights to users and roles

• List the various profile shells that are supported

• Describe privileges, supported groups of privileges, and systemwide defaults

• Configure and manage RBAC

• Configure and manage privileges

• Practice:

• Determine the privileges that a process requires

• Use the ppriv command to examine process privileges

• Assign default privileges to a system

• Add a role to administer the Oracle Solaris Cryptographic Framework

• Add a role to administer network security

This lesson provides an overview of the cryptographic services technology of Oracle Solaris 11.

Lesson Topics:

• Describe and use various cryptographic services

• Perform file encryption and decryption

• Install or uninstall providers

• Practice:

• Use various subcommands of pktool command

• Compute the digest by using the digest command

• Use the encrypt and decrypt commands

• Compute the MAC by using the mac command

• Manage the cryptographic framework

This lesson will teach you how to secure system resources using Oracle Solaris Auditing technology.

Lesson Topics:

• Plan for auditing

• Explain various concepts, terms, and commands of auditing

• Enable, disable, and refresh audit service

• Manage audit records and audit trails

• Configure audit classes, audit policies, and the audit_warn alias

• Practice:

• Create audit roles

• Create roles for auditing

• Create a custom audit class

• Configure Oracle Solaris auditing

• Examine the audit trail

• Configure the audit_syslog plug-in

This lesson discusses planning, monitoring, and controlling access to the disk; to files; and to peripheral devices.

Lesson Topics:

• Delegate ZFS permissions

• Encrypt ZFS file systems

• Use the BART tool and check file integrity

• Practice:

• Apply UNIX permissions to files and directories

• Create a rights profile for BART operations

• Customize BART manifests and reports

• Use BART to examine changes to the system

This lesson will teach you how to secure system resources by using password mechanisms and PAM.

Lesson Topics:

• Secure systems by implementing passwords and login controls

• Use password algorithms

• Monitor login attempts

• Control access to hardware

• Secure devices by using device policy and device

• Practice:

• Using PAM

• Use strong password encryption algorithms

• Configure automatic account locking

• ·         Configure password history

This lesson will teach you how to implement basic network security within the Oracle Solaris operating system.

Lesson Topics:

• Plan for network security

• Use and configure Secure She

• Use and enable TCP wrappers for service instan

• Use IPsec and IKE

• Use Kerberos authentication

• Practice:

• Secure remotely accessed file systems with NFS service

• Secure all traffic between two hosts

• Use Secure Shell

• Add IPsec policies to your host

• Use the ssh-agent program

• Configure IKE with selfsigned certificates

• Restrict access to services by using TCP wrappers

This lesson will teach you how to secure network using IP Filter feature of the Oracle Solaris operating system

Lesson Topics:

• Plan for IP Filter implementation

• Explain the IP Filter packet processing process

• Use various IP Filter commands

• Configure rules using various keywords

• Enable and disable IP Filter

• Practice:

• Configure IP Filter logging

• Start the IP filter

• Use the IP filter

This lesson will teach you to manage and control SMF services.

Lesson Topics:

• Plan for SMF configuration

• List and describe various SMF utilities

• Explain authorizations, privileges, and rights available in SMF

• Explain how to limit service privileges

• Determine a current service’s privileges

• Practice:

• Configure a service to use reduced privileges

• Create role accounts to manage system services

• Configure the Apache22 service

• Create authorizations to use with the Apache service

• Use the webadm role

In this lesson you will learn about implementing zones security.

Lesson Topics:

• Plan for security in zones

• Explain security characteristics and security restrictions in zones

• Explain various concepts of zones

• Integrate various security features in zones

• Manage resources in zones

• Manage network security in zones

In this lesson you will learn to implement labelled security by using Trusted Extensions.

Lesson Topics:

• Plan for security in Trusted Extensions

• Explain the differences and similarities between Oracle Solaris OS and Trusted Extensions

• Explain various security requirements of a system configured with Trusted Extensions

• Install the Oracle Solaris OS and add the Trusted Extensions feature

• Create labeled zones

• Allocate and deallocate devices

• Create roles and assign them to users

• Practice:

• Accessing Labeled Zones