- Sun Cluster 3.0 12/01 Security with the Apache and iPlanet Web and Messaging Agents
- Supportability
- Assumptions and Limitations
- Solaris OE Service Restriction
- Sun Cluster 3.0 Daemons
- Terminal Server Usage
- Node Authentication
- Securing Sun Cluster 3.0 12/01 Software
- Verifying Node Hardening
- Maintaining a Secure System
- Solaris Security Toolkit Software Backout Capabilities
- Conclusion
- Bibliography
Solaris Security Toolkit Software Backout Capabilities
The Solaris Security Toolkit software can be run multiple times and allows administrators to automatically undo or backout modifications made during a toolkit run.
In addition to displaying the output to the console, a log file is created in the /var/opt/SUNWjass/run directory. Each Solaris Security Toolkit software run creates another run directory in /var/opt/SUNWjass/run. The names of these directories are based on the date and time the run was begun.
The files stored in the /var/opt/SUNWjass/run directory are used not only to track modifications performed on the system, but are also used for the jass-execute "undo" functionality. A run, or series of runs, can be undone with the jass-execute -u command. For example, on a system where seven separate toolkit runs were performed, they could all be undone with the following command:
# pwd /opt/SUNWjass # ./jass-execute -u Please select from one of these backups to restore to 1. December 10, 2001 at 19:45:15 (//var/opt/SUNWjass/run/20011210194515) 2. December 10, 2001 at 19:25:22 (//var/opt/SUNWjass/run/20011210192522) 3. December 10, 2001 at 19:07:32 (//var/opt/SUNWjass/run/20011210190732) 4. December 10, 2001 at 19:04:36 (//var/opt/SUNWjass/run/20011210190436) 5. December 10, 2001 at 18:30:35 (//var/opt/SUNWjass/run/20011210183035) 6. December 10, 2001 at 18:29:48 (//var/opt/SUNWjass/run/20011210182948) 7. December 10, 2001 at 18:27:44 (//var/opt/SUNWjass/run/20011210182744) 8. Restore from all of them Choice? 8 ./jass-execute: NOTICE: Restoring to previous run //var/opt/SUNWjass/run/20011210194515 =============================================================== undo.driver: Driver started. =============================================================== [...] |
For more information about the Solaris Security Toolkit software, refer to the /opt/SUNWjass/Documentation directory or refer to http://www.sun.com/security/jass