Tham khảo tài liệu 'hack sun book hack proofing sun solaris phần 3', công nghệ thông tin, kỹ thuật lập trình phục vụ nhu cầu học tập, nghiên cứu và làm việc hiệu quả | 62 Chapter 2 Securing Solaris with the Bundled Security Tools 0 Even though the Orange Book classification levels go from the lowest level D to the highest level A in reality except for a very few exceptions most operating environments run under C1 C2 or B1 levels. Choosing Solaris 8 C2 Security 0 The SunSCREEN Basic Security Module is required in order to bring the default installation of the Solaris 8 OE up to C2 level security. 0 Auditing must be configured and managed with an organized methodology in order for it to be useful and controllable. 0 Auditing can be finely configured and managed by editing the audit_control and audit_user files and utilizing the auditconfig auditreduce and praudit commands. Choosing Trusted Solaris 8 0 Choosing the Trusted Solaris 8 OE although providing a very high level T of security requires a commitment of both human and system resources to administer and maintain. 0 Role-Based Access Control RBAC and Mandatory Access Control MAC also known as labeling are keystones to the comprehensive protection provided in Trusted Solaris 8 OE. 0 Proper auditing and auditing analysis are cornerstones of all security systems. Administrators must always be vigilant for possible breaches. Solaris 8 Security Enhancements 0 SunScreen SecureNet provides an effective means of encrypting network traffic. SunScreen Simple Key Management for Internet Protocols SKIP is the mechanism provided in SunScreen Secure Net for encrypting network private network VPN is a subset of SKIP and provides a way for a highly encrypted point-to-point connection or tunneling to be created either on a local LAN across a WAN or even across the Internet. Securing Solaris with the Bundled Security Tools Chapter 2 63 0 The Solaris Security Toolkit is a group of scripts designed to help facilitate the creation of secure systems. The scripts are highly configurable but since they are available for free as a download from Sun they are not .
