(Optional) Harden the Control Domain Manually

Perform this procedure only if you have installed the Solaris Security Toolkit 4.2 package.

When you use the Solaris Security Toolkit to harden the control domain, you disable many system services and place certain restrictions on network access. Refer to Related Documentation to find Solaris Security Toolkit 4.2 documentation for more information.

1. Harden using the ldm_control-secure.driver.

   # /opt/SUNWjass/bin/jass-execute -d ldm_control-secure.driver

   You can use other drivers to harden your system. You can also customize drivers to tune the security of your environment. Refer to the Solaris Security Toolkit 4.2 Reference Manual for more information about drivers and customizing them.

2. Answer y for yes to all questions in the interactive prompts.

3. Shut down and reboot your server for the hardening to take place.

   # /usr/sbin/shutdown -y -g0 -i6