JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
System Administration Guide: Security Services
search filter icon
search icon

Document Information

Preface

Part I Security Overview

1.  Security Services (Overview)

Part II System, File, and Device Security

2.  Managing Machine Security (Overview)

3.  Controlling Access to Systems (Tasks)

4.  Controlling Access to Devices (Tasks)

5.  Using the Basic Audit Reporting Tool (Tasks)

6.  Controlling Access to Files (Tasks)

7.  Using the Automated Security Enhancement Tool (Tasks)

Part III Roles, Rights Profiles, and Privileges

8.  Using Roles and Privileges (Overview)

9.  Using Role-Based Access Control (Tasks)

Using RBAC (Task Map)

Configuring RBAC (Task Map)

Configuring RBAC

How to Plan Your RBAC Implementation

How to Create and Assign a Role by Using the GUI

How to Create a Role From the Command Line

How to Assign a Role to a Local User

How to Audit Roles

How to Make root User Into a Role

Using Roles (Task Map)

Using Roles

How to Assume a Role in a Terminal Window

How to Assume a Role in the Solaris Management Console

Managing RBAC (Task Map)

Managing RBAC

How to Change the Password of a Role

How to Change the Properties of a Role

How to Create or Change a Rights Profile

How to Change the RBAC Properties of a User

How to Add RBAC Properties to Legacy Applications

10.  Role-Based Access Control (Reference)

11.  Privileges (Tasks)

12.  Privileges (Reference)

Part IV Oracle Solaris Cryptographic Services

13.  Oracle Solaris Cryptographic Framework (Overview)

14.  Oracle Solaris Cryptographic Framework (Tasks)

15.  Oracle Solaris Key Management Framework

Part V Authentication Services and Secure Communication

16.  Using Authentication Services (Tasks)

17.  Using PAM

18.  Using SASL

19.  Using Solaris Secure Shell (Tasks)

20.  Solaris Secure Shell (Reference)

Part VI Kerberos Service

21.  Introduction to the Kerberos Service

22.  Planning for the Kerberos Service

23.  Configuring the Kerberos Service (Tasks)

24.  Kerberos Error Messages and Troubleshooting

25.  Administering Kerberos Principals and Policies (Tasks)

26.  Using Kerberos Applications (Tasks)

27.  The Kerberos Service (Reference)

Part VII Oracle Solaris Auditing

28.  Oracle Solaris Auditing (Overview)

29.  Planning for Oracle Solaris Auditing

30.  Managing Solaris Auditing (Tasks)

31.  Solaris Auditing (Reference)

Glossary

Index

Configuring RBAC (Task Map)

To use RBAC effectively requires planning. Use the following task map to plan and initially implement RBAC at your site.

Task
Description
For Instructions
1. Plan for RBAC
Involves examining your site's security needs, and deciding how to use RBAC at your site.
2. Learn to use the Solaris Management Console
Involves becoming familiar with the Solaris Management Console.
3. Configure the first user and role
Uses the RBAC configuration tools in the Solaris Management Console to create a user and a role, and to assign the role to the user.
4. (Optional) Create other users who can assume roles
Ensures that users who can assume an administrative role exist.
5. (Recommended) Create other roles and assign them to users
Uses the RBAC tools to create roles for particular administrative areas, and to assign the roles to users.
Uses the command line to create roles, and to assign the roles to users
6. (Recommended) Audit role actions
Preselect an audit class that includes the audit event that records role actions.
7. (Optional) Make root user a role
Prevents anonymous root login, which is a security hole.