solaris安全设置方案

《solaris安全设置方案》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、From:编号：To:版本号：1.1Cc:存档路径：Solari系统安全设置方案1、打patchpatch的下载地址是：http://sunsolve.sun.com/securitypatch在下载了相应系统以及平台的补丁包之后，可以按照下列步骤安装：首先要进入单用户方式：按STOP－A后，敲boot-s或者执行init1命令然后执行下列命令：#cd/var/tmp#unzip8_Recommended.tar.Z#cd8_Recommended#./install_cluster2、停掉不必要的服务cd/etc/rc2.dmkdirDISABLEmvS73nfs.clientK28nfs.

2、serverS15nfs.serverS74autofsS30sysid.netS71sysid.sysS72autoinstallDISABLEmvS93cacheos.finishS73cachefs.daemonS80PRESERVES85powerK07dmiS77dmiS47aspppS89bdconfigDISABLEmvS70uucpS80lpS76nscdS74xntpdK07snmpdxS88sendmailS47pppdS99sshdS71ldap.clientDISABLEcd/etc/rc3.dmkdirDISABLEmvS15nfs.serverS34dhcpS50a

3、pacheS76snmpdxS77dmiDISABLE3、安装ssh3.4p1a、下载软件包，解压缩，按顺序安装软件包zlib-1.1.3-sol8-sparc-local.gzperl-5.6.1-sol8-sparc-local.gzprngd-0.9.23-sol8-sparc-local.gzegd-0.8-sol8-sparc-local.gz12北京润汇科技有限公司tcp_wrappers-7.6-sol8-sparc-local.gzopenssl-0.9.6c-sol8-sparc-local.gzb、启动prngdcat/var/log/syslog/var/adm/mess

4、ages>/usr/local/etc/prngd/prngd-seedmkdir/var/spool/prngd/usr/local/bin/prngd/var/spool/prngd/pool/usr/local/bin/egc.pl/var/spool/prngd/poolget添加文件如下vi/etc/init.d/prngd#!/bin/shpid=`/usr/bin/ps-e

5、/usr/bin/grepprngd

6、/usr/bin/sed-e's/^*//'-e's/.*//'`case$1in'start')/usr/local/bin/prngd/var/spool/prngd

7、/pool;;'stop')if["${pid}"!=""]then/usr/bin/kill${pid}fi;;*)echo"usage:/etc/init.d/prngd{start

8、stop}";;esac修改权限chownroot/etc/init.d/prngdchgrpsys/etc/init.d/prngdchmod555/etc/init.d/prngdln-s/etc/init.d/prngd/etc/rc2.d/S98prngdc、安装ssh和sshd修改/.profilecd/vi.profilePATH=/usr/local/sbin:/usr/local/bin:/u

9、sr/local/ssl/bin:/usr/sbin:/usr/bin:/usr/ccs/binexportPATH12北京润汇科技有限公司运行环境变量../.profilecd/tools/openssh-3.4p1./configure--with-tcp-wrappersmakemakeinstalluseraddsshd编辑文件vi/etc/init.d/sshd#!/bin/shpid=`/usr/bin/ps-e

10、/usr/bin/grepsshd

11、/usr/bin/sed-e's/^*//'-e's/.*//'`case$1in'start')/usr/local/sbin/ss

12、hd;;'stop')if["${pid}"!=""]then/usr/bin/kill${pid}fi;;*)echo"usage:/etc/init.d/sshd{start

13、stop}";;esac修改权限chownroot/etc/init.d/sshdchgrpsys/etc/init.d/sshdchmod555/etc/init.d/sshdln-s/etc/init.d/sshd/