Solaris 10 Security Essentials

SolarisTM 10 Security Essentials describes the various security technologies contained in the Solaris operating system. The book describes how to make installations secure and how to configure the OS to the particular needs of your environment, whether your systems are on the edge of the Internet or running a data center. The authors present the material in a straightforward way that makes a seemingly arcane subject accessible to system administrators at all levels. The strengths of the Solaris operating system’s security model are its scalability and its adaptability. It can protect a single user with login authentication or multiple users with Internet and intranet configurations requiring user-rights management, authentication, encryption, IP security, key management, and more. This book is written for users who need to secure their laptops, network administrators who must secure an entire company, and everyone in between. The book’s topics include Zones virtualization security System hardening Trusted Extensions (Multi-layered Security) Privileges and role-based access control (RBAC) Cryptographic services and key management Auditing Network security Pluggable Authentication Modules (PAM) SolarisTM 10 Security Essentials is the first in a new series on Solaris system administration. It is a superb guide to deploying and managing secure computer environments.

Solaris TM 10 Security Essentials describes the various security technologies contained in the Solaris operating system. The book describes how to make installations secure and how to configure the OS to the particular needs of your environment, whether your systems are on the edge of the Internet or running a data center. The authors present the material in a straightforward way that makes a seemingly arcane subject accessible to system administrators at all levels. The strengths of the Solaris operating system's security model are its scalability and its adaptability. It can protect a single user with login authentication or multiple users with Internet and intranet configurations requiring user-rights management, authentication, encryption, IP security, key management, and more. This book is written for users who need to secure their laptops, network administrators who must secure an entire company, and everyone in between. The book's topics include Zones virtualization security System hardening Trusted Extensions (Multi-layered Security) Privileges and role-based access control (RBAC) Cryptographic services and key management Auditing Network security Pluggable Authentication Modules (PAM) Solaris TM 10 Security Essentials is the first in a new series on Solaris system administration. It is a superb guide to deploying and managing secure computer environments.

SolarisTM 10 System Administration Essentials is the first book to concisely yet comprehensively cover all of the breakthrough features of the Solaris 10 operating system. The Solaris OS has a long history of innovation, and the Solaris 10 OS is a watershed release that includes features such as Zones, which provide application isolation and facilitate server consolidation ZFSTM, the file system that provides a new approach to managing your data with an easy administration interface The Fault Management Architecture, which automates fault detection and resolution The Service Management Facility, a unified model for services and service management on every Solaris system Dynamic Tracing (DTrace), for troubleshooting OS and application problems on production systems in real time In addition, the Solaris 10 OS fully supports 32-bit and 64-bit x86 platforms, as well as the SPARC® architecture. The book’s key topics include Installing, booting, and shutting down a system Managing packages and patches (software updates) Controlling system processes Managing disks and devices Managing users Configuring networks Using printing services SolarisTM 10 System Administration Essentials is part of a new series on Solaris system administration. It is a practical guide to deploying and managing the Solaris 10 operating system in a business or academic environment. The book is easy to read and rich with examples—a perfect companion for system administrators who are deploying the Solaris OS for the first time.

The ZFS file system offers a dramatic advance in data management with an innovative approach to data integrity, tremendous performance improvements, and a welcome integration of file system and volume management capabilities. The centerpiece of this new architecture is the concept of a virtual storage pool, which decouples the file system from physical storage in the same way that virtual memory abstracts the address space from physical memory, allowing for much more efficient use of storage devices. In ZFS, space is shared dynamically between multiple file systems from a single storage pool and is parceled out from the pool as file systems request it. Physical storage can therefore be added to storage pools dynamically, without interrupting services. This provides new levels of flexibility, availability, and performance. Because ZFS is a 128-bit file system, its theoretical limits are truly mind-boggling–2128 bytes of storage and 264 for everything else, including file systems, snapshots, directory entries, devices, and more. SolarisTM 10 ZFS Essentials is the perfect guide for learning how to deploy and manage ZFS file systems. If you are new to Solaris or are using ZFS for the first time, you will find it very easy to get ZFS up and running on your home system or your business IT infrastructure by following the simple instructions in this book. Then you too will understand all the benefits ZFS offers: Rock-solid data integrity No silent data corruption–ever Mind-boggling scalability Breathtaking speed Near-zero administration SolarisTM 10 ZFS Essentials is part of the Solaris System Administration Series and is intended for use as a full introduction and hands-on guide to Solaris ZFS.

Virtualization and related technologies like hypervisors, which create virtual machines on a single hardware machine, and containers (also known as zones), which create virtual operating systems running on a single operating system, are a totally new area for many system administrators. Oracle® SolarisTM 10 System Virtualization Essentials provides an accessible introduction to computer virtualization, specifically the system virtualization technologies that use the Oracle Solaris or OpenSolaris operating systems. This accessible guide covers the key concepts system administrators need to understand and explains how to Use Dynamic Domains to maximize workload isolation on Sun SPARC systems Use Oracle VM Server for SPARC to deploy different Oracle Solaris 10 and OpenSolaris environments on SPARC CMT (chip multithreading) systems Use Oracle VM Server for x86 or xVM hypervisor to deploy a server with heterogeneous operating systems Use Oracle VM VirtualBox to develop and test software in heterogeneous environments Use Oracle Solaris Containers to maximize efficiency and scalability of workloads Use Oracle Solaris Containers to migrate Solaris 8 and Solaris 9 workloads to new hardware systems Mix virtualization technologies to maximize workload density Starting with a discussion of system virtualization in general terms—the needs of consolidation, the benefits of virtualization, and a description of the most common types of computer virtualization—this book also covers many of the concepts, features, and methods shared by many implementations of system virtualization. Oracle’s computer virtualization technologies that are directly related to the Oracle Solaris OS are described in detail along with a discussion of the factors that should be considered when choosing a virtualization technology. Finally, several examples of these technologies and an overview of virtualization management software are provided, as well as a history of virtualization.

The Oracle Solaris DTrace feature revolutionizes the way you debug operating systems and applications. Using DTrace, you can dynamically instrument software and quickly answer virtually any question about its behavior. Now, for the first time, there's a comprehensive, authoritative guide to making the most of DTrace in any supported UNIX environment--from Oracle Solaris to OpenSolaris, Mac OS X, and FreeBSD. Written by key contributors to the DTrace community, DTrace teaches by example, presenting scores of commands and easy-to-adapt, downloadable D scripts. These concise examples generate answers to real and useful questions, and serve as a starting point for building more complex scripts. Using them, you can start making practical use of DTrace immediately, whether you're an administrator, developer, analyst, architect, or support professional. The authors fully explain the goals, techniques, and output associated with each script or command. Drawing on their extensive experience, they provide strategy suggestions, checklists, and functional diagrams, as well as a chapter of advanced tips and tricks. You'll learn how to Write effective scripts using DTrace's D language Use DTrace to thoroughly understand system performance Expose functional areas of the operating system, including I/O, filesystems, and protocols Use DTrace in the application and database development process Identify and fix security problems with DTrace Analyze the operating system kernel Integrate DTrace into source code Extend DTrace with other tools This book will help you make the most of DTrace to solve problems more quickly and efficiently, and build systems that work faster and more reliably.

Let's face it - the high technology field is dominated by men. Many women don't even consider it as an option when making their career choices. Yet this severely handicaps their future economic and career potential. Read this book and shape your future! You will meet some amazing women who have pursued high technology careers, the challenges they faced and the impact they are having on the world around them. You will learn the top 10 reasons to consider a career in high technology and skills you need to enter the field.