Developer's Guide to Oracle® Solaris 11 Security

Language:

Developer's Guide to Oracle^® Solaris 11 Security

July 2014

Provides security service information for application developers. Describes the interfaces for services such as PAM, SASL, GSS-API, the Oracle Solaris cryptographic framework, the Oracle Solaris Key Management Framework, and process privileges.

Document Information
Using This Documentation
- Product Documentation Library
- Access to Oracle Support
- Feedback
1 Oracle Solaris Security for Developers (Overview)
- Overview of Oracle Solaris Security Features for Developers
- System Security
  - Address Space Layout Randomization (ASLR)
    - Debugging and ASLR
- Network Security Architecture
2 Developing Privileged Applications
- Privileged Applications
- About Privileges
- Programming with Privileges
- Guidelines for Developing Privileged Applications
- About Authorizations
3 Writing PAM Applications and Services
- Introduction to the PAM Framework
- PAM Configuration
  - Configuring PAM Through /etc/pam.d
- Writing Applications That Use PAM Services
  - A Simple PAM Consumer Example
  - Other Useful PAM Functions
- Writing Conversation Functions
- Writing Modules That Provide PAM Services
  - Requirements for PAM Service Providers
  - Sample PAM Provider Service Module
4 Writing Applications That Use GSS-API
- Introduction to GSS-API
- Important Elements of GSS-API
- Developing Applications That Use GSS-API
5 GSS-API Client Example
- GSSAPI Client Example Overview
  - GSSAPI Client Example Structure
  - Running the GSSAPI Client Example
- GSSAPI Client Example: main Function
- Opening a Connection With the Server
- Establishing a Security Context With the Server
  - Translating a Service Name into GSS-API Format
  - Establishing a Security Context for GSS-API
- Miscellaneous GSSAPI Context Operations on the Client Side
- Wrapping and Sending a Message
- Reading and Verifying a Signature Block From a GSS-API Client
- Deleting the Security Context
6 GSS-API Server Example
- GSSAPI Server Example Overview
  - GSSAPI Server Example Structure
  - Running the GSSAPI Server Example
- GSSAPI Server Example: main Function
- Acquiring Credentials
- Checking for inetd
- Receiving Data From a Client
- Cleanup in the GSSAPI Server Example
7 Writing Applications That Use SASL
- Introduction to Simple Authentication Security Layer (SASL)
  - SASL Library Basics
  - Steps in the SASL Cycle
- SASL Example
- SASL for Service Providers
  - SASL Plug-in Overview
  - SASL Plug-in Development Guidelines
8 Introduction to the Oracle Solaris Cryptographic Framework
- Oracle Solaris Cryptography Terminology
- Overview of the Cryptographic Framework
- Components of the Cryptographic Framework
- What Cryptography Developers Need to Know
  - Requirements for Developers of User-Level Consumers
  - Requirements for Developers of Kernel-Level Consumers
9 Writing User???Level Cryptographic Applications
- Overview of the Cryptoki Library
- User-Level Cryptographic Application Examples
10 Introduction to the Oracle Solaris Key Management Framework
- Oracle Solaris Key Management Framework Features
- Oracle Solaris Key Management Framework Components
- Oracle Solaris Key Management Framework Example Application
Appendix A Secure Coding Guidelines for Developers
Appendix B Sample C???Based GSS-API Programs
- Client-Side Application
- Server-Side Application
- Miscellaneous GSS-API Sample Functions
Appendix C GSS-API Reference
- GSS-API Functions
  - Functions From Previous Versions of GSS-API
    - Functions for Manipulating OIDs
    - Renamed Functions
- GSS-API Status Codes
- GSS-API Data Types and Values
- Implementation-Specific Features in GSS-API
- Kerberos v5 Status Codes
Appendix D Specifying an OID
- Files with OID Values
  - /etc/gss/mech File
  - /etc/gss/qop File
- gss_str_to_oid Function
- Constructing Mechanism OIDs
  - createMechOid Function
- Specifying a Non-Default Mechanism
Appendix E Source Code for SASL Example
- SASL Client Example
- SASL Server Example
- Common Code
Appendix F SASL Reference Tables
- SASL Interface Summaries
Appendix G Security Considerations When Using C Functions
Glossary
Index