Todos after the first Solaris boot
Give root a separate home
=# mkdir /root=
Change home-dir in /etc/passwd for root to /root
Use a better password algorithm
More than eight characters for password and better hash
Change CRYPT_DEFAULTunix= to =CRYPT_DEFAULT=2a= in /etc/security/policy.conf.
Update your Software
Install pca and run
./pca -d --dltries=5 --user=<sunaccount> --passwd=<password> ./pca -i --dltries=5 --user=<sunaccount> --passwd=<password>
Reduce open ports
If you forget to disable „enable network services“ during installtion, you can fix this with
=netservices limited=
creates the windex database (man -k)
=catman -w=
Disable all unnecessary services
http://opensolaris.org/os/community/security/projects/sbd/sbd_design/
online 23:33:56 svc:/application/cde-printinfo:default online 23:33:57 svc:/network/rpc/cde-calendar-manager:default online 23:33:57 svc:/network/rpc/cde-ttdbserver:tcp online 23:34:00 svc:/application/graphical-login/cde-login:default online 23:02:17 svc:/network/rpc/bind:default online 23:02:41 svc:/network/rpc/gss:default online 23:02:41 svc:/network/rpc/smserver:default online 23:02:44 svc:/network/rpc-100235_1/rpc_ticotsord:default
Routing zwischen zonen verhindern
=ndd /dev/ip get ?=
=ndd /dev/ip set ip_restrict_interzone_loopback=1=
ipadm dladm zfs atime cache