Learn about the Security features and Performance of the
Oracle SPARC Servers.
Upgrade to Solaris 11.4, which includes the new Web Dashboard,
Compliance, Virtualization and much more.
Why SPARC for most demanding mixed Database workloads
45 Minutes
https://go.oracle.com/LP=89566
Oracle Solaris and SPARC Virtual Seminar
2 Hours 15 Minutes
https://go.oracle.com/LP=91258
Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts
20 February 2020
Oracle Systems Customer Forum / June 2020
Original plan was:
Tuesday, 17 March 2020 09:00 - 17:30
A full day event in Prague (Czech Republic)
NOW postponed to Early June 2020
with Oracle Systems Engineering and Product Management onsite
Learn the benefits in 2 tracks about Oracle SPARC/Solaris and Oracle PCA
Performance Analysis, Optimizing Lifecycle, Security & Compliance,
Beating Ransomware and a lot more ...
Full Agenda
https://www.oracle.com/a/ocom/docs/dc/em/systems-customer-forum-prague-2020-web.pdf
Registration is open
https://eventreg.oracle.com/profile/web/index.cfm?PKwebID=0x720861abcd
And Prague is a very nice City !!
See you there!
Tuesday, 17 March 2020 09:00 - 17:30
A full day event in Prague (Czech Republic)
NOW postponed to Early June 2020
with Oracle Systems Engineering and Product Management onsite
Learn the benefits in 2 tracks about Oracle SPARC/Solaris and Oracle PCA
Performance Analysis, Optimizing Lifecycle, Security & Compliance,
Beating Ransomware and a lot more ...
Full Agenda
https://www.oracle.com/a/ocom/docs/dc/em/systems-customer-forum-prague-2020-web.pdf
Registration is open
https://eventreg.oracle.com/profile/web/index.cfm?PKwebID=0x720861abcd
And Prague is a very nice City !!
See you there!
23 December 2019
My Solaris Highlights 2019
And another year nearly
done. Here my highlights in the field of Oracle Solaris.
In March we at JomaSoft
made our VDCF Version 7.2 available with enhancements for Solaris
Monitoring and Systems Verification.
If you would like to learn
more about “Oracle Solaris 11.4” which is available since August 2018
you can watch the 2 hours Oracle Virtual Seminar which was held in April by the Oracle Solaris Product Managers.
you can watch the 2 hours Oracle Virtual Seminar which was held in April by the Oracle Solaris Product Managers.
Mid May Oracle organized the “Oracle Solaris Tech Day” in Prague. This was a full day event in a nice European city. Very interesting presentations and discussions with the Solaris Engineers.
May 22th I could talk
about the small, but powerful SPARC S7-2 Servers at the SOUG Day
in
Olten (Switzerland). You can download the german presentation/pdf
Olten (Switzerland). You can download the german presentation/pdf
In August I talked
at the Robotron Oracle Fokustag in Wil about OS Security with Oracle
Solaris.
I missed Oracle
Open World in San Francisco this September, but the presentations
can be downloaded. You can find the list of Solaris/SPARC Session in my
can be downloaded. You can find the list of Solaris/SPARC Session in my
blog post “Solaris Session PDF of Oracle Open World
2019”
https://jomasoftmarcel.blogspot.com/2019/09/solaris-session-pdf-of-oracle-open.html
Every year in November the largest Oracle User Conference in Europe takes place in Nuremberg, Germany. The DOAG Conference: Good location, food and lots of technical sessions.
This year I could talk about the two Topics “Solaris 11.4” and “Private Cloud on SPARC”
Here the Links to the 2 german PDFs:
https://www.jomasoft.ch/docs/DOAG19_JomaSoft_Solaris_114.pdf
https://jomasoftmarcel.blogspot.com/2019/09/solaris-session-pdf-of-oracle-open.html
Every year in November the largest Oracle User Conference in Europe takes place in Nuremberg, Germany. The DOAG Conference: Good location, food and lots of technical sessions.
This year I could talk about the two Topics “Solaris 11.4” and “Private Cloud on SPARC”
Here the Links to the 2 german PDFs:
https://www.jomasoft.ch/docs/DOAG19_JomaSoft_Solaris_114.pdf
https://www.jomasoft.ch/docs/DOAG19_JomaSoft_PrivateCloud_SPARC.pdf
In November and December I was at 5 Locations in Germany (Hamburg, Frankfurt, Düsseldorf, München and Berlin) to present our JomaSoft VDCF Solaris Management Solution and to explain how to make Solaris Operations more efficient.
After several years in the Oracle ACE Community Oracle nominated me at the highest Level in the ACE Program as an “Oracle ACE Director”.
Now its time to relax a few days. More about Oracle Solaris in 2020. Stay tuned.
Merry Christmas and a Happy New Year to all Oracle Solaris Engineers, Consultants and Admins.
In November and December I was at 5 Locations in Germany (Hamburg, Frankfurt, Düsseldorf, München and Berlin) to present our JomaSoft VDCF Solaris Management Solution and to explain how to make Solaris Operations more efficient.
After several years in the Oracle ACE Community Oracle nominated me at the highest Level in the ACE Program as an “Oracle ACE Director”.
Now its time to relax a few days. More about Oracle Solaris in 2020. Stay tuned.
Merry Christmas and a Happy New Year to all Oracle Solaris Engineers, Consultants and Admins.
22 May 2017
Is my Server Secure? Use the Solaris 11 Compliance Tool
Security Compliance
IT Security is more important than ever. Make sure your systems are up-to-date.
Don't run Services you don't need. Use strong passwords. Protect your files.
Security Compliance checking helps to detect weak and modified configuration.
Solaris 11.3 contains the 'compliance' tool. Using this tool you can create reports against 3 prepared Security Levels.
1. Oracle Solaris Security Benchmark: Baseline
Matches basically a Secure By Default Installation
2. Oracle Solaris Security Benchmark: Recommended
Adds Recommended Checks
3. PCI-DSS
Payment Card Industry - Data Security Standard
The Solaris compliance tool creates easy to understand HTML reports.
It even supports customization for individual machines where individual checks may be enabled or disabled if required.
Use this Blog as an introduction with a few examples. You need to invest more time to reach a completely secure system.
Solaris 11 Compliance Samples
To check against the Solaris Baseline Benchmark run the following command on your system:
# compliance assess -b solaris
Check the HTML report
# compliance report
/var/share/compliance/assessments/solaris.Baseline.2017-05-22,10:32/report.html
The HTML report lists the checks in detail including a description how to fix failed checks. On a newly installed system there may be a few failed checks. If you don't use Kerberos you can disable the services to make sure the checks pass.
# svcadm disable svc:/network/nfs/fedfs-client:default
# svcadm disable svc:/network/rpc/gss:default
Next we check against the Solaris Recommended Profile
# compliance assess -b solaris -p Recommended
# compliance report -f log/var/share/compliance/assessments/solaris.Recommended.2017-05-22,17:18/log# grep fail /var/share/compliance/assessments/solaris.Recommended.2017-05-22,17:18/log | wc -l
26
To fulfill the Recommended Profile lots of configuration changes would be needed. As a first step we create now an own benchmark, based on the Solaris Baseline, but we add a few additional checks.
If you deploy services, checks like this one may report failed:
OSC-73505 / ssh(1) is the only service binding a listener to non-loopback addresses
On a Solaris Zone I run a Solaris IPS Repository. We create an own tailored benchmark where
this check is disabled.
# compliance tailor -t solaris_jomasoft set benchmark=solaris
# compliance tailor -t solaris_jomasoft set profile=Baseline
# compliance tailor -t solaris_jomasoft exclude OSC-73505 # ssh(1) is the only service binding a listener to non-loopback
Then we add our Password Rules
# compliance tailor -t solaris_jomasoft include OSC-49500 # Passwords require at least 1 upper-case characters
# compliance tailor -t solaris_jomasoft include OSC-47500 # Passwords require at least 1 digits
Change values of existing Checks
# compliance tailor -t solaris_jomasoft value OSCV-46000=8 # Passwords must be at least 8 characters long
# compliance tailor -t solaris_jomasoft value OSCV-48000=1 # Passwords must have at least 1 lower-case characters
# compliance tailor -t solaris_jomasoft value OSCV-49000=1 # Passwords must have at least 1 special characters
Additional Checks
# compliance tailor -t solaris_jomasoft include OSC-93005 # User home directories have appropriate permissions
# compliance tailor -t solaris_jomasoft include OSC-92505 # User home directory ownership is correct
Now we run against our own tailored Benchmark:
# compliance assess -t solaris_jomasoft
A Compliance Report for PCI-DSS is created with
# compliance assess -b pci-dss
To reach PCI-DSS compliance there is some configuration work required.
# compliance report -f log
/var/share/compliance/assessments/pci-dss.Solaris_PCI-DSS.2017-05-22,11:22/log
# grep fail /var/share/compliance/assessments/pci-dss.Solaris_PCI-DSS.2017-05-22,11:22/log | wc -l
29
Find all details in the Oracle Solaris 11.3 Compliance Guide (PDF)
https://docs.oracle.com/cd/E53394_01/pdf/E54817.pdf
Run your benchmark regularly to detect changes by Administrators and Applications.
IT Security is more important than ever. Make sure your systems are up-to-date.
Don't run Services you don't need. Use strong passwords. Protect your files.
Security Compliance checking helps to detect weak and modified configuration.
Solaris 11.3 contains the 'compliance' tool. Using this tool you can create reports against 3 prepared Security Levels.
1. Oracle Solaris Security Benchmark: Baseline
Matches basically a Secure By Default Installation
2. Oracle Solaris Security Benchmark: Recommended
Adds Recommended Checks
3. PCI-DSS
Payment Card Industry - Data Security Standard
The Solaris compliance tool creates easy to understand HTML reports.
It even supports customization for individual machines where individual checks may be enabled or disabled if required.
Use this Blog as an introduction with a few examples. You need to invest more time to reach a completely secure system.
Solaris 11 Compliance Samples
To check against the Solaris Baseline Benchmark run the following command on your system:
# compliance assess -b solaris
Check the HTML report
# compliance report
/var/share/compliance/assessments/solaris.Baseline.2017-05-22,10:32/report.html
The HTML report lists the checks in detail including a description how to fix failed checks. On a newly installed system there may be a few failed checks. If you don't use Kerberos you can disable the services to make sure the checks pass.
# svcadm disable svc:/network/nfs/fedfs-client:default
# svcadm disable svc:/network/rpc/gss:default
Next we check against the Solaris Recommended Profile
# compliance assess -b solaris -p Recommended
# compliance report -f log/var/share/compliance/assessments/solaris.Recommended.2017-05-22,17:18/log# grep fail /var/share/compliance/assessments/solaris.Recommended.2017-05-22,17:18/log | wc -l
26
To fulfill the Recommended Profile lots of configuration changes would be needed. As a first step we create now an own benchmark, based on the Solaris Baseline, but we add a few additional checks.
If you deploy services, checks like this one may report failed:
OSC-73505 / ssh(1) is the only service binding a listener to non-loopback addresses
On a Solaris Zone I run a Solaris IPS Repository. We create an own tailored benchmark where
this check is disabled.
# compliance tailor -t solaris_jomasoft set benchmark=solaris
# compliance tailor -t solaris_jomasoft set profile=Baseline
# compliance tailor -t solaris_jomasoft exclude OSC-73505 # ssh(1) is the only service binding a listener to non-loopback
Then we add our Password Rules
# compliance tailor -t solaris_jomasoft include OSC-49500 # Passwords require at least 1 upper-case characters
# compliance tailor -t solaris_jomasoft include OSC-47500 # Passwords require at least 1 digits
Change values of existing Checks
# compliance tailor -t solaris_jomasoft value OSCV-46000=8 # Passwords must be at least 8 characters long
# compliance tailor -t solaris_jomasoft value OSCV-48000=1 # Passwords must have at least 1 lower-case characters
# compliance tailor -t solaris_jomasoft value OSCV-49000=1 # Passwords must have at least 1 special characters
Additional Checks
# compliance tailor -t solaris_jomasoft include OSC-93005 # User home directories have appropriate permissions
# compliance tailor -t solaris_jomasoft include OSC-92505 # User home directory ownership is correct
Now we run against our own tailored Benchmark:
# compliance assess -t solaris_jomasoft
A Compliance Report for PCI-DSS is created with
# compliance assess -b pci-dss
To reach PCI-DSS compliance there is some configuration work required.
# compliance report -f log
/var/share/compliance/assessments/pci-dss.Solaris_PCI-DSS.2017-05-22,11:22/log
# grep fail /var/share/compliance/assessments/pci-dss.Solaris_PCI-DSS.2017-05-22,11:22/log | wc -l
29
Find all details in the Oracle Solaris 11.3 Compliance Guide (PDF)
https://docs.oracle.com/cd/E53394_01/pdf/E54817.pdf
Run your benchmark regularly to detect changes by Administrators and Applications.
Subscribe to:
Posts (Atom)