RE: Sun OS 5.10 configuration check

["Sheldon Malm" <smalm () ncircle com>]

There are a bunch of products in the marketplace that do this (including
products from nCircle, tripwire, and a bunch of others).

If you want to take a snapshot of a single system to get up to speed on
what to look for, there are tools available from CIS (benchmarks, etc.)
and checklists available from mitre (CCE), DISA STIG's, etc.

Even though my company sells a product that does what you're looking
for, I would recommend that you review a single host against one of
these benchmarks/checklists before you go through purchasing a vendor
solution.  If nothing else, this research will make you more capable of
selecting a vendor solution that fits your needs.

I hope this helps. 


Sheldon Malm
Director
Security Research & Development
nCircle Network Security

Check out the VERT daily post
http://blog.ncircle.com/vert



-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Harrison, Jonathan
Sent: Monday, February 04, 2008 11:12 AM
To: security-basics () securityfocus com
Subject: Re: Sun OS 5.10 configuration check

I would suggest compiling and using tripwire if you want to see file and
config changes. 

----- Original Message -----
From: listbounce () securityfocus com <listbounce () securityfocus com>
To: security-basics () securityfocus com
<security-basics () securityfocus com>
Sent: Mon Feb 04 00:24:51 2008
Subject: Sun OS 5.10 configuration check

We could like to take a snapshot of the current setting of SunOS 5.10. 

What is the best way to go about. Which all files needs to be looked
into.

The objective is to check at a futire date, if changes have taken place
on the configuration, security policies, settings etc.