Document Information
Preface
Part I Security Overview
1. Security Services (Overview)
Part II System, File, and Device Security
2. Managing Machine Security (Overview)
3. Controlling Access to Systems (Tasks)
Controlling System Access (Task Map)
Securing Logins and Passwords (Task Map)
Securing Logins and Passwords
Changing the Password Algorithm (Task Map)
Changing the Default Algorithm for Password Encryption
Monitoring and Restricting Superuser (Task Map)
Monitoring and Restricting Superuser
SPARC: Controlling Access to System Hardware (Task Map)
Controlling Access to System Hardware
4. Virus Scanning Service (Tasks)
5. Controlling Access to Devices (Tasks)
6. Using the Basic Audit Reporting Tool (Tasks)
7. Controlling Access to Files (Tasks)
Part III Roles, Rights Profiles, and Privileges
8. Using Roles and Privileges (Overview)
9. Using Role-Based Access Control (Tasks)
10. Role-Based Access Control (Reference)
11. Privileges (Tasks)
12. Privileges (Reference)
Part IV Solaris Cryptographic Services
13. Solaris Cryptographic Framework (Overview)
14. Solaris Cryptographic Framework (Tasks)
15. Solaris Key Management Framework
Part V Authentication Services and Secure Communication
16. Using Authentication Services (Tasks)
17. Using PAM
18. Using SASL
19. Using Solaris Secure Shell (Tasks)
20. Solaris Secure Shell (Reference)
Part VI Kerberos Service
21. Introduction to the Kerberos Service
22. Planning for the Kerberos Service
23. Configuring the Kerberos Service (Tasks)
24. Kerberos Error Messages and Troubleshooting
25. Administering Kerberos Principals and Policies (Tasks)
26. Using Kerberos Applications (Tasks)
27. The Kerberos Service (Reference)
Part VII Solaris Auditing
28. Solaris Auditing (Overview)
29. Planning for Solaris Auditing
30. Managing Solaris Auditing (Tasks)
31. Solaris Auditing (Reference)
Glossary
Index
A computer is as secure as its weakest point of entry. The following task map shows the areas that you should monitor and secure.
Task
Description
For Instructions
Monitor, permit, and deny user login
Monitors unusual login activity. Prevents logins temporarily. Manages dial-up logins.
Provide strong password encryption
Specifies algorithms to encrypt user passwords. Installs additional algorithms.
Monitor and restrict superuser activities
Regularly monitors superuser activity. Prevents remote login by a root user.
Prevent access to hardware settings
Keeps ordinary users away from the PROM.
