jass

JASS or Solaris Security Toolkit

Install jass: downloaded the file and pkgadd -d . SUNWjass

Run pca again to patch jass.

Options:

• ./jass-execute -d secure.driver will turn off everything except ssh
• ./jass-execute -d secure-server.driver will turn off almost everything except for common services

Now undo all the really obnoxious stuff:

• [ ] not have account passwords expire (revert /etc/default/password)
• [ ] enable cron and at
• [ ] clear the annoying JASS motd and banner files
• [ ] enable ssh from everywhere in /etc/hosts.allow