On Mon, Aug 04, 2008 at 10:32:24AM +0100, Darren J Moffat wrote: > Garrett D'Amore wrote: > > Since there is not yet any standard for minimizing Solaris -- at least > > as distributed by Sun (and indeed Solaris is already rather large), can > > I humbly suggest to the project team that they might want to consider > > dropping this portion of the project. Other distribution builders that > > want to deliver a system without X11 will have a larger task ahead of > > them anyway, and can easily repackage emacs to their own taste if so > > desired. > > Yes there is, while the URLs I mention below are out of date with > respect to the OS versions it mentions the techniques still apply: > > ----- > Updated Solaris Operating Environment Minimization for Security: A > Simple, Reproducible and Secure Application Installation Methodolgy > Updated for Solaris 8 Operating Environment > -by Alex Noordergraaf > > http://www.sun.com/blueprints/1100/minimize-updt1.pdf > ----- > > ----- > Solaris Operating Environment Minimization for Security: A Simple, > Reproducible and Secure Application Installation Methodology > -by Keith Watson and Alex Noordergraaf > Discuss OS minimization as a technique for reducing system > vulnerabilities; a simple method for duplicating these installations on > large numbers of servers is also introduced. > > http://www.sun.com/blueprints/1299/minimization.pdf > ----- > > There have been updates to this for Solaris 9 and 10 but they weren't > published as blueprints with "Minimization" in their titles. There has > also been a lot of work done by 3rd Parties that Sun Security > Ambassadors and Solaris Security group have endorsed and participated in.
The Security community has also produced "Rules of Engagement for the Support of Reduced or Minimal Configurations" - see http://www.opensolaris.org/os/community/security/files/minimization-support-rules-ext.pdf Ceri -- That must be wonderful! I don't understand it at all. -- Moliere -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 187 bytes Desc: not available URL: <http://mail.opensolaris.org/pipermail/opensolaris-arc/attachments/20080804/85cb5f3d/attachment.bin>
