C

-C option, auditreduce command, How to Merge Audit Files From the Audit Trail

C shell, privileged version, Profile Shell in RBAC

-c, auditrecord command, How to Display Audit Record Definitions

-c option

auditrecord command, How to Display Audit Record Definitions

auditreduce command

How to Select Audit Events From the Audit Trail

How to Select Audit Events From the Audit Trail

cache, credential, How the Kerberos Authentication System Works

canon_user_plugin option, SASL and, SASL Options

caret (^) in audit class prefixes

How to Configure a User's Audit Characteristics

How to Find Audit Records of Changes to Specific Files

Audit Class Syntax

caret (^) prefix, using in audit_flags value, How to Configure a User's Audit Characteristics

CD-ROM drives

allocating, How to Mount an Allocated Device

security, Device-Clean Scripts

cdrw command, authorizations required, Commands That Require Authorizations

certificate signing requests (CSR), See certificates

certificates

exporting for use by another system, How to Export a Certificate and Private Key in PKCS #12 Format

generating with pktool gencert command, How to Create a Certificate by Using the pktool gencert Command

importing into keystore, How to Import a Certificate Into Your Keystore

signing PKCS #10 CSR

using the pktool command, How to Sign a Certificate Request by Using the pktool signcsr Command

ChallengeResponseAuthentication keyword, See KbdInteractiveAuthentication keyword

changing

allocatable devices, How to Change Which Devices Can Be Allocated

audit_class file, How to Add an Audit Class

audit_event file, How to Change an Audit Event's Class Membership

auditing defaults, How to Preselect Audit Classes

default password algorithm, Changing the Password Algorithm (Task Map)

device policy, How to Change the Device Policy on an Existing Device

file ownership, How to Change the Owner of a File

file permissions

absolute mode, How to Change File Permissions in Absolute Mode

special, How to Change Special File Permissions in Absolute Mode

symbolic mode, How to Change File Permissions in Symbolic Mode

group ownership of file, How to Change Group Ownership of a File

NFS secret keys, Implementation of Diffie-Hellman Authentication

passphrase for Solaris Secure Shell, How to Change the Passphrase for a Solaris Secure Shell Private Key

password algorithm for a domain, How to Specify a New Password Algorithm for an NIS Domain

password algorithm task map, Changing the Password Algorithm (Task Map)

password of role, How to Change the Password of a Role

properties of role, How to Change the Properties of a Role

rights profile contents, How to Create or Change a Rights Profile

root user into role, How to Make root User Into a Role

special file permissions, How to Change Special File Permissions in Absolute Mode

your password with kpasswd, Changing Your Password

your password with passwd, Changing Your Password

CheckHostIP keyword, ssh_config file, Keywords in Solaris Secure Shell

chgrp command

description, Commands for Viewing and Securing Files

syntax, How to Change Group Ownership of a File

chkey command

Implementation of Diffie-Hellman Authentication

How to Set Up a Diffie-Hellman Key for an NIS User

chmod command

changing special permissions

How to Change Special File Permissions in Absolute Mode

How to Change Special File Permissions in Absolute Mode

description, Commands for Viewing and Securing Files

syntax, How to Change Special File Permissions in Absolute Mode

choosing, your password, Advice on Choosing a Password

chown command, description, Commands for Viewing and Securing Files

ChrootDirectory keyword, ssh_config file, Keywords in Solaris Secure Shell

Cipher keyword, ssh_config file, Keywords in Solaris Secure Shell

Ciphers keyword, Solaris Secure Shell, Keywords in Solaris Secure Shell

classes, See audit classes

cleaning up, binary audit files, How to Clean Up a not_terminated Audit File

clear protection level, Overview of Kerberized Commands

ClearAllForwardings keyword, Solaris Secure Shell port forwarding, Keywords in Solaris Secure Shell

client names, planning for in Kerberos, Client and Service Principal Names

ClientAliveCountMax keyword, ssh_config file, Keywords in Solaris Secure Shell

ClientAliveInterval keyword, ssh_config file, Keywords in Solaris Secure Shell

clients

AUTH_DH client-server session, Implementation of Diffie-Hellman Authentication

configuring for Solaris Secure Shell

Session Characteristics in Solaris Secure Shell

Client Configuration in Solaris Secure Shell

configuring Kerberos, Configuring Kerberos Clients

definition in Kerberos, Authentication-Specific Terminology

clntconfig principal

creating

How to Manually Configure a Master KDC

How to Configure a KDC to Use an LDAP Data Server

clock skew

Kerberos and, Synchronizing Clocks Between KDCs and Kerberos Clients

Kerberos planning and, Clock Synchronization Within a Realm

clock synchronizing

Kerberos master KDC and

How to Manually Configure a Master KDC

How to Configure a KDC to Use an LDAP Data Server

Kerberos planning and, Clock Synchronization Within a Realm

Kerberos slave KDC and, How to Manually Configure a Slave KDC

Kerberos slave server and, How to Configure a Slave KDC to Use Full Propagation

cmd audit token, cmd Token

cnt audit policy

description, Determining Audit Policy

with ahlt policy, Audit Policies for Asynchronous and Synchronous Events

combining audit files

auditreduce command

How to Merge Audit Files From the Audit Trail

auditreduce Command

from different zones, Auditing and Oracle Solaris Zones

command execution, Solaris Secure Shell, Command Execution and Data Forwarding in Solaris Secure Shell

command-line equivalents of SEAM Tool, Command-Line Equivalents of the SEAM Tool

commands

See also individual commands

auditing commands, Audit Commands

cryptographic framework commands, Administrative Commands in the Oracle Solaris Cryptographic Framework

determining user's privileged commands, How to Determine the Privileged Commands That You Can Run

device allocation commands, Device Allocation Commands

device policy commands, Device Policy Commands

file protection commands, Commands for Viewing and Securing Files

for administering privileges, Administrative Commands for Handling Privileges

Kerberos, Kerberos Commands

RBAC administration commands, Commands That Manage RBAC

Secure RPC commands, Implementation of Diffie-Hellman Authentication

Solaris Secure Shell commands, Solaris Secure Shell Commands

that assign privileges, Assigning Privileges

that check for privileges, Applications That Check for Privileges

user-level cryptographic commands, User-Level Commands in the Oracle Solaris Cryptographic Framework

common keys

calculating, Implementation of Diffie-Hellman Authentication

DH authentication and, Diffie-Hellman Authentication and Secure RPC

components

BART, BART Components

device allocation mechanism, Components of Device Allocation

RBAC, Oracle Solaris RBAC Elements and Basic Concepts

Solaris Secure Shell user session, Command Execution and Data Forwarding in Solaris Secure Shell

compressing, audit files on disk, How to Compress Audit Files on a Dedicated File System

Compression keyword, Solaris Secure Shell, Keywords in Solaris Secure Shell

CompressionLevel keyword, ssh_config file, Keywords in Solaris Secure Shell

Computer Emergency Response Team/Coordination Center (CERT/CC), Reporting Security Problems

computer security, See system security

computing

DH key, How to Set Up a Diffie-Hellman Key for an NIS Host

digest of a file, How to Compute a Digest of a File

MAC of a file, How to Compute a MAC of a File

secret key

How to Generate a Symmetric Key by Using the dd Command

How to Generate a Symmetric Key by Using the pktool Command

configuration decisions

auditing

file storage, How to Plan Storage for Audit Records

policy, Determining Audit Policy

who and what to audit, How to Plan Who and What to Audit

zones, How to Plan Auditing in Zones

Kerberos

client and service principal names, Client and Service Principal Names

clients, Client Configuration Options

clock synchronization, Clock Synchronization Within a Realm

database propagation, Which Database Propagation System to Use

encryption types, Kerberos Encryption Types

KDC server, KDC Configuration Options

mapping host names onto realms, Mapping Host Names Onto Realms

number of realms, Number of Realms

ports, Ports for the KDC and Admin Services

realm hierarchy, Realm Hierarchy

realm names, Realm Names

realms, Planning Kerberos Realms

slave KDCs, The Number of Slave KDCs

password algorithm, Password Encryption

configuration files

audit_class file, audit_class File

audit_event file, audit_event File

device_maps file, device_maps File

nsswitch.conf file, Maintaining Login Control

for password algorithms, Password Encryption

policy.conf file

Password Encryption

How to Specify an Algorithm for Password Encryption

Commands That Manage RBAC

Solaris Secure Shell, Session Characteristics in Solaris Secure Shell

syslog.conf file

How to Monitor All Failed Login Attempts

Files With Privilege Information

syslog.conf File

with privilege information, Files With Privilege Information

configured audit policy, permanent audit policy, How to Change Audit Policy

configuring

active audit policy, How to Change Audit Policy

ahlt audit policy, How to Change Audit Policy

audit_class file, How to Add an Audit Class

audit classes, How to Preselect Audit Classes

audit_event file, How to Change an Audit Event's Class Membership

audit logs task map, Configuring Audit Logs

audit policy, How to Change Audit Policy

audit policy temporarily, How to Change Audit Policy

audit queue controls, How to Change Audit Queue Controls

audit service policy, How to Change Audit Policy

audit trail overflow prevention, How to Prevent Audit Trail Overflow

audit_warn script, How to Configure the audit_warn Email Alias

auditconfig command, auditconfig Command

auditing, Configuring the Audit Service (Tasks)

auditing in zones

Auditing on a System With Zones

Auditing and Oracle Solaris Zones

auditing task map, Configuring the Audit Service (Task Map)

device allocation, Managing Device Allocation (Task Map)

device policy, Configuring Device Policy (Task Map)

devices task map, Configuring Devices (Task Map)

DH key for NIS user, How to Set Up a Diffie-Hellman Key for an NIS User

DH key in NIS, How to Set Up a Diffie-Hellman Key for an NIS Host

dial-up logins, How to Create a Dial-Up Password

exceptions to Solaris Secure Shell system defaults, How to Create User and Host Exceptions to SSH System Defaults

hardware security, Controlling Access to System Hardware

host-based authentication for Solaris Secure Shell, How to Set Up Host-Based Authentication for Solaris Secure Shell

identical auditing for non-global zones, How to Configure All Zones Identically for Auditing

Kerberos

adding administration principals

How to Manually Configure a Master KDC

How to Configure a KDC to Use an LDAP Data Server

clients, Configuring Kerberos Clients

cross-realm authentication, Configuring Cross-Realm Authentication

master KDC server

How to Automatically Configure a Master KDC

How to Interactively Configure a Master KDC

How to Manually Configure a Master KDC

master KDC server using LDAP, How to Configure a KDC to Use an LDAP Data Server

NFS servers, How to Configure Kerberos NFS Servers

overview, Configuring the Kerberos Service (Tasks)

slave KDC server

How to Automatically Configure a Slave KDC

How to Interactively Configure a Slave KDC

How to Manually Configure a Slave KDC

task map, Configuring the Kerberos Service (Task Map)

naming service, How to Make root User Into a Role

password for hardware access, How to Require a Password for Hardware Access

per-zone auditing, How to Configure Per-Zone Auditing

permanent audit policy, How to Change Audit Policy

perzone audit policy, How to Change Audit Policy

port forwarding in Solaris Secure Shell, How to Configure Port Forwarding in Solaris Secure Shell

privileged users, How to Create a Privileged User

RBAC

Configuring and Using RBAC

How to Plan Your RBAC Implementation

RBAC task map, Configuring and Using RBAC (Task Map)

rights profiles, How to Create or Change a Rights Profile

roles

How to Create a Role

How to Change the Properties of a Role

root user as role, How to Make root User Into a Role

Solaris Secure Shell, Solaris Secure Shell (Task Map)

clients, Client Configuration in Solaris Secure Shell

servers, Server Configuration in Solaris Secure Shell

Solaris Secure Shell task map, Configuring Solaris Secure Shell (Task Map)

space for audit trail, How to Assign Audit Space for the Audit Trail

temporary audit policy, How to Change Audit Policy

textual audit logs, How to Configure syslog Audit Logs

configuring application servers, Configuring Kerberos Network Application Servers

ConnectionAttempts keyword, ssh_config file, Keywords in Solaris Secure Shell

ConnectTimeout keyword, ssh_config file, Keywords in Solaris Secure Shell

console, displaying su command attempts, How to Restrict and Monitor Superuser Logins

CONSOLE in Solaris Secure Shell, Solaris Secure Shell and Login Environment Variables

Console User (RBAC), rights profile, Console User Rights Profile

CONSOLE_USER keyword, policy.conf file, policy.conf File

consumers, definition in cryptographic framework, Terminology in the Oracle Solaris Cryptographic Framework

context-sensitive help, SEAM Tool, Print and Online Help Features of the SEAM Tool

control manifests (BART), Basic Audit Reporting Tool (Overview)

controlling

access to system hardware, SPARC: Controlling Access to System Hardware (Task Map)

system access, Controlling System Access (Task Map)

system usage, Controlling Access to Machine Resources

conversation keys

decrypting in secure RPC, Implementation of Diffie-Hellman Authentication

generating in secure RPC, Implementation of Diffie-Hellman Authentication

converting

audit records to readable format

How to View the Contents of Binary Audit Files

praudit Command

copying, files using Solaris Secure Shell, How to Copy Files With Solaris Secure Shell

copying audit records to single file, How to Select Audit Events From the Audit Trail

cost control, and auditing, Controlling Auditing Costs

crammd5.so.1 plug-in, SASL and, SASL Plug-ins

creating

audit trail

auditd daemon, Audit Trail

credential table, How to Create a Credential Table

d_passwd file, How to Create a Dial-Up Password

dial-up passwords

How to Create a Dial-Up Password

How to Create a Dial-Up Password

/etc/d_passwd file, How to Create a Dial-Up Password

file digests, How to Compute a Digest of a File

key pair, How to Generate a Key Pair by Using the pktool genkeypair Command

local user, How to Make root User Into a Role

new device-clean scripts, Device-Clean Scripts

new policy (Kerberos)

How to Create a New Kerberos Principal

How to Create a New Kerberos Policy

new principal (Kerberos), How to Create a New Kerberos Principal

passwords for temporary user, How to Create a Dial-Up Password

privileged users, How to Create a Privileged User

rights profiles, How to Create or Change a Rights Profile

roles, How to Create a Role

root user as role, How to Make root User Into a Role

secret keys

for encryption

How to Generate a Symmetric Key by Using the dd Command

How to Generate a Symmetric Key by Using the pktool Command

Solaris Secure Shell keys, How to Generate a Public/Private Key Pair for Use With Solaris Secure Shell

stash file

How to Manually Configure a Slave KDC

How to Configure a Slave KDC to Use Full Propagation

storage for binary audit files, How to Create ZFS File Systems for Audit Files

tickets with kinit, Creating a Kerberos Ticket

cred database, DH authentication, Diffie-Hellman Authentication and Secure RPC

cred table

DH authentication and, Diffie-Hellman Authentication and Secure RPC

information stored by server, Implementation of Diffie-Hellman Authentication

credential

cache, How the Kerberos Authentication System Works

description

Implementation of Diffie-Hellman Authentication

Authentication-Specific Terminology

obtaining for a server, Obtaining a Credential for a Server

obtaining for a TGS, Obtaining a Credential for the Ticket-Granting Service

or tickets, How the Kerberos Service Works

credential table, adding single entry to, How to Add a Single Entry to the Credential Table

credentials, mapping, Mapping GSS Credentials to UNIX Credentials

crontab files, authorizations required, Commands That Require Authorizations

cross-realm authentication, configuring, Configuring Cross-Realm Authentication

CRYPT_ALGORITHMS_ALLOW keyword, policy.conf file, Password Encryption

CRYPT_ALGORITHMS_DEPRECATE keyword, policy.conf file, Password Encryption

crypt_bsdbf password algorithm, Password Encryption

crypt_bsdmd5 password algorithm, Password Encryption

crypt command, file security, Protecting Files With Encryption

CRYPT_DEFAULT keyword, policy.conf file, Password Encryption

CRYPT_DEFAULT system variable, How to Specify an Algorithm for Password Encryption

crypt_sha256 password algorithm

Password Encryption

Changing the Default Algorithm for Password Encryption

crypt_sunmd5 password algorithm

Password Encryption

Password Encryption

crypt_unix password algorithm, Password Encryption

Crypto Management (RBAC)

creating role, How to Assign a Role

use of rights profile

How to Prevent the Use of a User-Level Mechanism

How to Prevent the Use of a Kernel Software Provider

cryptoadm command

description, Scope of the Oracle Solaris Cryptographic Framework

disabling cryptographic mechanisms

How to Prevent the Use of a User-Level Mechanism

How to Prevent the Use of a Kernel Software Provider

disabling hardware mechanisms, How to Disable Hardware Provider Mechanisms and Features

installing PKCS #11 library, How to Add a Software Provider

listing providers, How to List Available Providers

-m option

How to Prevent the Use of a User-Level Mechanism

How to Prevent the Use of a Kernel Software Provider

-p option

How to Prevent the Use of a User-Level Mechanism

How to Prevent the Use of a Kernel Software Provider

restoring kernel software provider, How to Prevent the Use of a Kernel Software Provider

cryptoadm install command, installing PKCS #11 library, How to Add a Software Provider

cryptographic audit class, Definitions of Audit Classes

cryptographic framework

administering with role, How to Assign a Role

connecting providers, Plugins to the Oracle Solaris Cryptographic Framework

consumers, Oracle Solaris Cryptographic Framework

cryptoadm command

Scope of the Oracle Solaris Cryptographic Framework

Administrative Commands in the Oracle Solaris Cryptographic Framework

definition of terms, Terminology in the Oracle Solaris Cryptographic Framework

description, Oracle Solaris Cryptographic Framework

elfsign command

Scope of the Oracle Solaris Cryptographic Framework

Binary Signatures for Third-Party Software

error messages, How to Encrypt and Decrypt a File

hardware plugins, Oracle Solaris Cryptographic Framework

installing providers, Plugins to the Oracle Solaris Cryptographic Framework

interacting with, Scope of the Oracle Solaris Cryptographic Framework

listing providers

How to List Available Providers

How to List Available Providers

PKCS #11 library, Oracle Solaris Cryptographic Framework

providers

Oracle Solaris Cryptographic Framework

Terminology in the Oracle Solaris Cryptographic Framework

refreshing, How to Refresh or Restart All Cryptographic Services

registering providers, Plugins to the Oracle Solaris Cryptographic Framework

restarting, How to Refresh or Restart All Cryptographic Services

signing providers, Plugins to the Oracle Solaris Cryptographic Framework

task maps, Using the Cryptographic Framework (Task Map)

user-level commands, User-Level Commands in the Oracle Solaris Cryptographic Framework

zones and

Cryptographic Services and Zones

How to Refresh or Restart All Cryptographic Services

cryptographic operations, cryptographic audit class, Definitions of Audit Classes

cryptographic services, See cryptographic framework

Cryptoki, See PKCS #11 library

csh command, privileged version, Profile Shell in RBAC

customizing, manifests, How to Customize a Manifest

customizing a report (BART), How to Customize a BART Report by Using a Rules File