OpenSolaris

You are not signed in. Sign in or register.

Security Related Announcements

UPDATE: Solaris Security Best Practices | 01/31/2008

On 11/02/2007, we announced the publication of Solaris 10 security guidance from both Sun and the Center for Internet Security. This material has been moved from the OpenSolaris Security Community site and placed on sun.com at the following URLs:

Also, for convenience, these two documents have been combined into one compressed archive. The content is the same. This is only a move. The OpenSolaris Security Community Library links have been updated to reflect this new location.

New Solaris Security Best Practices | 11/02/2007

It is with great pleasure that we can announce the arrival of the latest security guidance from both Sun and the Center for Internet Security. Working together, in concert with representatives from academia, industry and government, we have published security guidance for Solaris 10 11/06 and 8/07. This content represents the best and most complete form of Solaris security guidance ever produced.

Not only are the recommendations based upon industry consensus but they are also supported by Sun. What is even better is that this material was completed with support and feedback from both the National Security Agency and the Defense Information Systems Agency. We would like to especially thank both organizations for their significant contributions to this material! This iteration brings us (Sun, CIS, NSA and DISA) closer than even toward a single, consistent set of security recommendations for the Solaris OS.

For more information and links to the docs, check out this posting.

Crypto Project | 01/25/2007

The OpenSolaris Crypto Project has opened up. As such all content that was previously here in the security community has moved to http://opensolaris.org/os/project/crypto/

Trusted Extensions Developer Guide | 10/30/2006

We now have a great new Developer's Guide for Trusted Extensions.
The Solaris Express version of the guide is available from: http://docs.sun.com/app/docs/doc/819-7312 this guide

This guide will help developers understand how to take advantage of label manipulation APIs, the Windowing system, interprocess communication and even includes a prototype Trusted Web Guard application.

Google Summer of Code 2006 | 05/31/2006

I'm very pleased to announce that the OpenSolaris security community was choosen by Google to have a student for the Google Summer of Code 2006.

Johannes Nicolai, will be working on exapanding the "basic" privilege set in OpenSolaris. This will allow us to do express policies such as "this application can never access the network".

Please welcome Johannes to the security community and give him your support.