David,
Sure. Check out: http://wikis.sun.com/display/ISC/OpenSolaris+AMI+Hardening The actual code to implement this configuration is at: http://kenai.com/projects/isc/sources/source/content/opt/lockdown.tmpl?rev=27 You can learn about this and the full Immutable Service Container project at: http://kenai.com/projects/isc/pages/OpenSolaris Further, we also have pre-configured images if you are going the Amazon EC2 route: http://blogs.sun.com/ec2/entry/hardened_opensolaris_2009_06_on Let me know if you have any questions. g On 9/24/09 4:25 PM, David Abrahams wrote:
The more I read up on zones and Xen, the more I am reminded that the host system that runs all these virtual services should be "hardened," i.e. stripped of inessential parts. I don't see any easy way to install a minimal OpenSolaris 0906 system, and I can't find any hardening guides out there. Can anyone offer pointers to documentation or other resources? Thanks,
_______________________________________________ indiana-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/indiana-discuss
