2010-10 mars rebuild
Dan pooched mars (by accidentally hitting ^C in the middle of a kernel patch while drunk and tired) on . . . [x] installed new Solaris 10/09 * [x] installed jass (but didn't run it) * [x] installed the cluster . . . * [x] install pkg-get * [x] install rsync * jass ** [x] run [[jass]] server-secure.driver & reboot . . . ** [ ] document the obnoxious parts of [[jass]] that we always back out ** [ ] do the backouts . . .
2K - last updated 2010-10-09 23:08 UTC by DanielMacKay
2010 new backup
This page documents the installation and switchover of the new [[D510MO]] which turned into the Union . . . 149 installed. Installed 124631-36 by hand. Do [[jass]] stuff To-do list: * [x] not have account passwords . . . [ ] enable cron and at * [x] clear the annoying JASS motd and banner files * [x] enable ssh from everywhere . . .
1K - last updated 2010-10-09 18:32 UTC by DanielMacKay
2010 venus upgrade
Board from Moose: LANPARTY nF4 with an AMD 3800 X2 * Moose says: ''the two ethernet ports on that board . . . wget * [x] Install & run pca * [x] Install [[jass]] * [x] create daniel & denny accounts * [x] install . . .
2K - last updated 2012-05-28 12:12 UTC by Dan
BonMotMove
== Notes / Discussion == * should we have a restricted /etc/hosts.allow on the global container? What . . . installed * patched (TWENTY FIVE REBOOTS!!!) * [[jass]] * create "mercury" zone * configure NTP * JASS . . . ** JASS harden "mercury" ** Put all or most of /etc/default/passwd . . . back ** Repair everything that JASS broke ** Maybe remove TCP wrappers ** copy syslog.conf . . .
3K - last updated 2010-10-09 18:33 UTC by DanielMacKay
ReferenceDocuments
== Solaris 10 == * Fun beginners cribsheet with tips: http://www.pcnetcom.net/solaris.htm * Learning . . . Solaris == * Sun /SST Solaris Security Toolkit [[jass]] * Titan hardening script http://www.fish.com/titan/ . . .
4K - last updated 2010-10-09 18:34 UTC by DanielMacKay
RunSST
#REDIRECT [[jass]] . . .
1K - last updated 2010-10-09 18:34 UTC by DanielMacKay
Solaris10 Install
* [ ] Install the o/s from CD or net (about 3 hours from CD) * [ ] Install [[jass]] (but don't run it . . . * [ ] PatchSolaris10 * [ ] Run [[jass]] * fix everything that JASS broke ** [ ] See . . .
1K - last updated 2010-10-13 10:44 UTC by DanielMacKay
SolarisHardening
unfinishedpage: maybe we should replace this with Sun's JASS tool or SANS' YASSP This document outlines . . .
6K - last updated 2006-06-10 11:02 UTC by 7130
jass
=== JASS or Solaris Security Toolkit === Install jass: downloaded the file and pkgadd -d . SUNWjass Run . . . pca again to patch jass. Options: * ./jass-execute -d secure.driver will . . . turn off everything except ssh * ./jass-execute -d secure-server.driver will turn off . . . [ ] enable cron and at * [ ] clear the annoying JASS motd and banner files * [ ] enable ssh from everywhere . . .
1K - last updated 2010-10-09 18:36 UTC by DanielMacKay
9 pages found.