- Sun Cluster 3.0 12/01 Security with the Apache and iPlanet Web and Messaging Agents
- Assumptions and Limitations
- Solaris OE Service Restriction
- Sun Cluster 3.0 Daemons
- Terminal Server Usage
- Node Authentication
- Securing Sun Cluster 3.0 12/01 Software
- Verifying Node Hardening
- Maintaining a Secure System
- Solaris Security Toolkit Software Backout Capabilities
Solaris Security Toolkit Software Backout Capabilities
The Solaris Security Toolkit software can be run multiple times and allows administrators to automatically undo or backout modifications made during a toolkit run.
In addition to displaying the output to the console, a log file is created in the /var/opt/SUNWjass/run directory. Each Solaris Security Toolkit software run creates another run directory in /var/opt/SUNWjass/run. The names of these directories are based on the date and time the run was begun.
The files stored in the /var/opt/SUNWjass/run directory are used not only to track modifications performed on the system, but are also used for the jass-execute "undo" functionality. A run, or series of runs, can be undone with the jass-execute -u command. For example, on a system where seven separate toolkit runs were performed, they could all be undone with the following command:
# pwd /opt/SUNWjass # ./jass-execute -u Please select from one of these backups to restore to 1. December 10, 2001 at 19:45:15 (//var/opt/SUNWjass/run/20011210194515) 2. December 10, 2001 at 19:25:22 (//var/opt/SUNWjass/run/20011210192522) 3. December 10, 2001 at 19:07:32 (//var/opt/SUNWjass/run/20011210190732) 4. December 10, 2001 at 19:04:36 (//var/opt/SUNWjass/run/20011210190436) 5. December 10, 2001 at 18:30:35 (//var/opt/SUNWjass/run/20011210183035) 6. December 10, 2001 at 18:29:48 (//var/opt/SUNWjass/run/20011210182948) 7. December 10, 2001 at 18:27:44 (//var/opt/SUNWjass/run/20011210182744) 8. Restore from all of them Choice? 8 ./jass-execute: NOTICE: Restoring to previous run //var/opt/SUNWjass/run/20011210194515 =============================================================== undo.driver: Driver started. =============================================================== [...]
For more information about the Solaris Security Toolkit software, refer to the /opt/SUNWjass/Documentation directory or refer to http://www.sun.com/security/jass