printing


security

  • log of all the performed su commands
  • /var/adm/sulog
     
  • log of the failed logins
  • /var/adm/loginlog
     
  • /etc/ftpusers
  • lists the accounts for which ftp loggin is unauthorized
     
  • change the accessible ports
  • #> vi /etc/services
    #> pkill inetd
    #> /usr/sbin/inetd -s
    or, probably cleaner:
    #> /etc/inet.d/inetsvc stop
    #> /etc/inet.d/inetsvc start
     
  • restrict the ability to login as root to the console only
  • CONSOLE=/dev/console in /etc/default/login
     
  • to restrict chown: set rstchown = 1 in /etc/system (this is the default)
  • to allow chown: set rstchown = 0
     
  • for a process with setuid root, catopen will fail except if the catalog is owned by root, readable
  • only by root and the full path is given (starting with patched Solaris 7)


    system administration

    NIS DNS compiler


    misc.:


    X11


    Last update: December 17th, 2004 - Laurent