OpenSolaris

1. Community: Security
   1. Announcements
   2. News
   3. Blogs
   4. Discussions
   5. Community Projects
      1. Pluggable Authentication Module
      2. Trusted Extensions
         1. History
         2. Trusted Extensions Developer Guide
         3. Installing the Solaris Trusted Extensions Software on a Laptop Computer
         4. Experimental Java Classes for Trusted Extensions Labeling APIs
      3. Secure By Default
         1. Secure by Default Design
      4. Privilege Debugging
      5. RBAC - Role Based Access Control
      6. Auditing
      7. Basic File Privs
      8. Kerberos
      9. Java
      10. SSH
      11. Cryptographic Framework
   6. Library
      1. HOWTO Documents
         1. Privilege Bracketing
      2. Username length
   7. Presentations
   8. Events
   9. Leaders
   10. Observers
   11. Files
   12. Contributor Grants

OpenSolaris Security Presentations

This section is intended to provide a quick and easy listing of OpenSolaris (or Solaris 10+) security-focused presentations. This list is based upon community submissions, so please let us know about your favorite presentations.

• Hack-Fu – Deconstructing the Security Capabilities of the Solaris 10 OS. (October 2007. Glenn Brunette). This is a one hour technical discussion of Solaris 10 security controls discussed from the viewpoint of a potential attacker. This is similar to the Practical Solaris 10 Security presentation discussed below but has updated content and more focused examples.

• Solaris 10 Security TOI – Deep Dive. (September 2007. Glenn Brunette). This is a 2-3 hour technical discussion of the various security controls found in Solaris 10. This talk has been updated for Solaris 10 08/07. This version also includes a few slides on the OpenSolaris LOFICC and ZFS Encryption projects.

• Practical Solaris 10 Security. (October 2006, Glenn Brunette). This talk was given at the NSA Red Team/Blue Team Symposium and focuses on security controls from the viewpoint of someone attacking a Solaris 10 system.

• London OpenSolaris User's Group Security Overview. (October 2006, Darren Moffat). This talk provides an overview of the security features found in the Solaris 10 OS and provides a more in-depth treatment of the Solaris Role-based Access Control (RBAC) facility.

• Enhancing Security Awareness and Control with DTrace. (October 2006, Glenn Brunette and Jon Haslam). This talk looks at how DTrace could potentially be used to provide greater (and more focused) insight into security-related events happening on a system.

• There and Back Again – A Solaris Security Story. (Glenn Brunette, September 2006). This talk provides an overview of the security features introduced in various Solaris and Trusted Solaris OS releases as well as provides an overview of Sun's participation in government and industry collaboration in the area of security recommendations for the Solaris OS.

• Solaris Secure by Default Overview. (August 2006, Scott Rotondo). This presentation provides an introduction to the Solaris Secure by Default project, including how it was implemented and how it can be used to deploy more secure systems.

• OpenSolaris Crypto Filesystems: 5 minute talk. (December 2005, Darren Moffat)

• Solaris 10 Security Presentation. (June 2005, Darren Moffat)

• OpenSolaris Security Tour. (June 2005, Darren Moffat)

If you have suggestions for additional references to be added to this listing, please drop us a note at the OpenSolaris Security Forum.