Security Enhancements

The following security features and enhancements have been added to the Solaris 10 5/08 release.

Solaris Trusted Extensions Supports Mounting Labeled File Systems With the NFSv3 Protocol

Starting with this release, the Solaris Trusted Extensions software can mount labeled file systems by using NFS Version 3 (NFSv3) in addition to NFS Version 4 (NFSv4). Solaris Trusted Extensions has no restrictions on using TCP as an underlying transport protocol for NFS. However, users cannot choose User Datagram Protocol (UDP) as the underlying protocol for read-down NFS access for NFSv3. The use of UDP for the initial mount operation is supported, but UDP is not supported for subsequent multilevel NFSv3 operations.

SPARC: Hardware -Accelerated Elliptical Curve Cryptography (ECC) Support

The UltraSPARC T2 (Niagara 2) based platforms support hardware acceleration of Elliptical Curve Cryptography (ECC) algorithms. The Solaris OS now supports high performance ECDSA and ECDH on these platforms. These new ECC algorithms are accessible to all users of the Solaris Cryptographic Framework including Java technology and OpenSSL users.