But what is it good for?

Posts tagged with: software

Ping(1M) on OpenSolaris Easter Egg

It's amazing what you discover whilst working a weekend shift with a bit of time to spare. Whilst perusing through the shell scripts used as part of the Sun in-house built VPN solution (Oracle are giving it the chop in favour of Cisco SSL AnyConnect client which doesn't officially work on Solaris x86 - it does with the help of openconnect though ;-) ), I discovered a little easter egg in ping(1M).  Continue reading ►

Auditing and OpenSSH On Solaris

Many people don't run the SSH that comes with Solaris 9 and later on their Solaris hosts, instead opting for OpenSSH or one of Tectia's SSH products. Some don't like SunSSH's versioning, as it makes it hard to determine if SunSSH is vulnerable to the same issues as OpenSSH (most often it's not or the issue has already been addressed), others rely on features on OpenSSH that haven't made it into SunSSH (there aren't many) and then there are those who's corporate guidelines only allow for a third party solution - probably for uniformity across platforms. Whatever the reason, all of these people are security conscious so they may also have an auditing (aka BSM) requirement too, and this is where the problem comes to light: they soon discover that it appears that not all events are being recorded for users who connect via this third party SSH software.Thankfully it's easy to get OpenSSH working with Solaris auditing thanks to the very generous code contributions made by Sun to the OpenSSH community, way back in 2001, that were finally included in OpenSSH 4.0 and later. However, despite these contributions, people still miss the details on getting BSM working as they expect and this is what I'll address here.  Continue reading ►
Top