Steve wrote: > I've just installed a home ZFS CIFS (kernel) fileserver with Opensolaris > 2008.05 updated to v95. > > Now would be good to harden the configuration of this server and since I'm > still not proficient in OS admin I tried to look around for procedure to > follow. > > >From the researches done it seems that the JASS tool would be the best to > >use, but I didn't understand if it's compatible with my version (it's > >written from Solaris 8 to 10) and what options to use. >
I don't follow the CIFS discussion, so I don't know if this got anywhere. What you should have done was cc'd the security discussion group. I believe the first step here is to select the correct "service policy" to apply to the system. In /var/svc/profile, there are a few names such as "generic_net" and "generic_limited_net" that should give you a heads up about which path to take here. Darren
