Index

Symbols  Numerics  A  B  C  D  E  F  G  H  I  K  L  M  N  O  P  R  S  T  U  V  X  Z  

---

Symbols

• ; (semicolon)
  • device_allocate file 4.4.2.7
• /dev/arp device
  • getting IP MIB-II information 4.1.3
• /etc/certs/elfsign/ORCLS11SE file 2.1.4
• /etc/certs/elfsign directory
  • verified boot 2.1.2
• /etc/default/kbd file 3.4.2
• /etc/default/login file
  • restricting remote root access 3.3.2
• /etc/default/passwd file
  • changes to 1.2.4.2
• /etc/default/su file
  • displaying su command attempts 3.3.2
  • monitoring access attempts 3.3.2
  • monitoring su command 3.3.1
• /etc/issue file 3.1.1
• /etc/logindevperm file 1.2.4.5
• /etc/motd file 3.1.1
• /etc/nologin file
  • disabling user logins temporarily 3.1.4
• /etc/security/device_allocate file 4.4.2.7
• /etc/security/device_maps file 4.4.2.6
• /etc/security/policy.conf file
  • algorithms configuration 2.2.1.1, 2.2.2.3.1, 2.4.3.1, 3.2.1, 3.2.2, 3.2.3, 3.3.1, 3.3.2, 2.2.1.2, 2.2.1.3, 2.2.1.4
• /usr/lib/security/$ISA/pkcs11_tpm.so 2.2.1.5
• /var/adm/sulog file
  • monitoring contents of 3.3.1
• - (minus sign)
  • sulog file 3.3.1
• @ (at sign)
  • device_allocate file 4.4.2.7
• * (asterisk)
  • device_allocate file 4.4.2.7
• \ (backslash)
  • device_allocate file 4.4.2.7
  • device_maps file 4.4.2.6
• # (pound sign)
  • device_allocate file 4.4.2.7
  • device_maps file 4.4.2.6
• + (plus sign)
  • sulog file 3.3.1
• > (redirect output)
  • preventing 1.3.5.2
• >> (append output)
  • preventing 1.3.5.2

---

Numerics

• 32-bit executables
  • protecting from compromising security 2.4.2

---

A

• access
  • address space 2.4.1
  • restricting for
    • devices 1.5, 4.1
    • system hardware 3.4
  • root access
    • displaying attempts on console 3.3.2
    • monitoring su command attempts 1.3.3, 3.3.1
    • restricting 1.4.4, 3.3.2
  • security
    • ACLs 1.4.2
    • controlling system usage 1.3
    • devices 4.1
    • file access restriction 1.3.5.3
    • firewall setup 1.6.3
    • login access restrictions 1.2.4
    • login control 1.2.4
    • monitoring system usage 1.3.9, 1.4.6
    • network control 1.6
    • PATH variable setting 1.3.5.1
    • peripheral devices 1.5
    • physical security 1.2.1
    • protecting system integrity 2
    • reporting problems 1.7
    • root login tracking 1.3.3
    • setuid programs 1.3.6
    • system hardware 3.4
  • sharing files 1.4.3
• account-policy SMF stencil
  • algorithms configuration 2.2.1.1, 2.2.2.3.1, 2.4.3.1, 3.2.1, 3.2.2, 3.2.3, 3.3.1, 3.3.2, 2.2.1.2, 2.2.1.3, 2.2.1.4
  • attributes for password algorithms 1.2.4.2.3
  • changing on all systems 3.2.2
  • changing password configuration 1.2.4.2.3
  • changing SMF properties 3.3.1, 3.3.2
  • for password algorithms 1.2.4.2.2
  • specifying password algorithms 2.2.1.1, 2.2.2.3.1, 2.4.3.1, 3.2.1, 3.2.2, 3.2.3, 3.3.1, 3.3.2, 2.2.1.2, 2.2.1.3, 2.2.1.4
  • system-wide changes 1.2.4.2
• ACL description 1.4.2
• add_drv command
  • description 4.4.1
• adding
  • allocatable device 4.2.1
  • security to devices 4.2
  • security to system hardware 3.4.1
• address space
  • random layout 2.4.1
• adiheap security extension 2.4.4
• adistack security extension 2.4.5
• administering
  • device allocation 4.2
  • device allocation task map 4.2
  • device policy 4.1
  • devices 4.2
  • password algorithms 3.2
• Administrator Message Edit rights profile 3.1.1
• algorithms
  • list of password configuration 2.2.1.1, 2.2.2.3.1, 2.4.3.1, 3.2.1, 3.2.2, 3.2.3, 3.3.1, 3.3.2, 2.2.1.2, 2.2.1.3, 2.2.1.4
  • password encryption 3.2
  • password hashes 1.2.4.2.1, 1.2.4.2.2
• allocate command
  • allocate error state 4.4.2.5
  • authorizations required 4.4.2.4.1
  • removable media 4.3.1
  • user authorization 4.2.2.1
  • using 4.3.1
• allocate error state 4.4.2.5
• allocating devices
  • by users 4.3.1
  • forcibly 4.2.4
  • troubleshooting 4.3.1
• antivirus software 5
• appending arrow (>>)
  • preventing appending 1.3.5.2
• aslr security extension 2.4.1
• asterisk (*)
  • device_allocate file 4.4.2.7
• at sign (@)
  • device_allocate file 4.4.2.7
• audio devices
  • security 4.4.2.8.3
• auditing
  • changes in device policy 4.1.2
  • device allocation 4.2.6
• authentication
  • description 1.6.2
  • network security 1.6.2
  • types 1.6.2
• authorizations
  • for device allocation 4.2.2.1, 4.4.2.3, 4.4.2.4.1
  • not requiring for device allocation 4.2.5
  • solaris.device.allocate 4.2.2.1, 4.4.2.4
  • solaris.device.revoke 4.4.2.4.1
  • types 1.6.2

---

B

• backslash (\)
  • device_allocate file 4.4.2.6, 4.4.2.7
• banner messages
  • configuring 3.1.1
• Blowfish encryption algorithm
  • allowing in heterogeneous environment 3.2.1
  • description 1.2.4.2.2
  • policy.conf file 3.2.1
• boot_policy property
  • verified boot 2.1.4
• boot verification 1.2.2, 2.1

---

C

• CD-ROM drives
  • allocating 4.3.2
  • security 4.4.2.8.2
• certificates
  • managing with Oracle ILOM 2.1.5
  • verified boot and 2.1.5
  • verifying manually for verified boot 2.1.5
• changing
  • allocatable devices 4.2.5
  • default password algorithm 3.2
  • password algorithm for a domain 3.2.2
  • password algorithm task map 3.2
• commands 3
  • device allocation commands 4.4.2.4
  • device policy commands 4.4.1
• compliance
  • monitoring
    • monitoring system usage 1.3.10
• components
  • device allocation mechanism 4.4.2.1
• computer security 3
• computer system security 3
• configuration decisions
  • password algorithm 1.2.4.2.1
• configuration files
  • device_maps file 4.4.2.6
  • policy.conf file 2.2.1.1, 2.2.2.3.1, 2.4.3.1, 3.2.1, 3.2.2, 3.2.3, 3.3.1, 3.3.2, 2.2.1.2, 2.2.1.3, 2.2.1.4
• configuring
  • banner messages 3.1.1
  • device allocation 4.2
  • device policy 4.1
  • hardware security 3.4
  • password for hardware access 3.4.1
• console
  • displaying su command attempts 3.3.2
• controlling
  • system usage 1.3
• control lists 1.3.5.3
• creating
  • new device-clean scripts 4.4.2.8.4
• crypt_bsdbf password algorithm 1.2.4.2.2
• crypt_bsdmd5 password algorithm 1.2.4.2.2
• CRYPT_DEFAULT system variable 3.2.1
• crypt_sha256 password algorithm 1.2.4.2.2, 3.2
• crypt_sunmd5 password algorithm 1.2.4.2.2
• crypt_unix password algorithm 1.2.4.2.2
• crypt command
  • file security 1.4.1

---

D

• data
  • migrating or restoring TPM 2.2.2.3
• deallocate command
  • allocate error state 4.4.2.5
  • authorizations required 4.4.2.4.1
  • device-clean scripts and 4.4.2.8.4
  • using 4.3.3
• deallocating
  • devices 4.3.3
  • forcibly 4.2.4
  • microphone 4.3.3
• defaults
  • system-wide in account-policy SMF stencil 1.2.4.2.2
• desktop login
  • security messages 3.1.1
• devfsadm command
  • description 4.4.1
• device_allocate file
  • description 4.4.2.7
  • format 4.4.2.7
  • sample 4.2.5, 4.4.2.7
• device_maps file 4.4.2.6
• device allocation
  • adding devices 4.2
  • allocatable devices 4.4.2.7
  • allocate error state 4.4.2.5
  • allocating devices 4.3.1
  • auditing 4.2.6
  • authorizations 4.4.2.3
  • authorizations for commands 4.4.2.4.1
  • authorizing users to allocate 4.2.2.1
  • changing allocatable devices 4.2.5
  • commands 4.4.2.4
  • components of mechanism 4.4.2.1
  • configuration file 4.4.2.6
  • deallocate command
    • device-clean scripts and 4.4.2.8.4
    • using 4.3.3
  • deallocating devices 4.3.3
  • device_allocate file 4.4.2.7
  • device_maps file 4.4.2.6
  • device-clean scripts
    • creating 4.4.2.8.4
    • description 4.4.2.8
    • options 4.4.2.8.4
  • disabling 4.2.1
  • enabling 4.2.1
  • examples 4.3.1
  • forcibly allocating devices 4.2.4
  • forcibly deallocating devices 4.2.4
  • making device allocatable 4.2.1
  • managing devices 4.2
  • mounting devices 4.3.2
  • not requiring authorization 4.2.5
  • preventing 4.2.5
  • requiring authorization 4.2.5
  • rights profiles 4.4.2.3
  • SMF service 4.4.2.2
  • task map 4.2
  • troubleshooting 4.3.1, 4.3.2
  • troubleshooting permissions 4.2.3
  • unmounting allocated device 4.3.3
  • user procedures 4.2
  • using 4.2
  • using allocate command 4.3.1
  • viewing information 4.2.3
• device-allocation package 4.2
• device-clean scripts
  • description 4.4.2.8
  • media 4.4.2.7, 4.4.2.8
  • object reuse 4.4.2.8
  • options 4.4.2.8.4
  • writing new scripts 4.4.2.8.4
• device management 4.1
• Device Management rights profile 4.4.2.3
• device policy
  • add_drv command 4.4.1
  • auditing changes 4.1.2
  • commands 4.4.1
  • configuring 4.1
  • kernel protection 4.4
  • managing devices 4.1
  • overview 1.5, 1.5.1
  • task map 4.1
  • update_drv command 4.4.1
  • viewing 4.1.1
• devices
  • allocating for use 4.2
  • allocation 4.1
  • auditing allocation of 4.2.6
  • auditing policy changes 4.1.2
  • authorizing users to allocate 4.2.2.1
  • changing which are allocatable 4.2.5
  • deallocating 4.3.3
  • forcibly allocating 4.2.4
  • forcibly deallocating 4.2.4
  • getting IP MIB-II information 4.1.3
  • listing 4.1.1
  • listing device names 4.2.3
  • login access control 1.5
  • making allocatable 4.2.1
  • managing 4.1
  • managing allocation of 4.2
  • mounting allocated devices 4.3.2
  • not requiring authorization for use 4.2.5
  • policy commands 4.4.1
  • preventing use of all 4.2.5
  • preventing use of some 4.2.5
  • protecting by device allocation 1.5
  • protecting in the kernel 1.5
  • security 1.5
  • unmounting allocated device 4.3.3
  • viewing allocation information 4.2.3
  • viewing device policy 4.1.1
  • zones and 1.5
• Device Security rights profile 4.2.1, 4.4.2.3
• disabling
  • 32-bit executables that compromise security 2.4.2
  • abort sequence 3.4.2
  • device allocation 4.2.1
  • keyboard abort 3.4.2
  • keyboard shutdown 3.4.2
  • logins temporarily 3.1.4
  • remote root access 3.3.2
  • system abort sequence 3.4.2
  • user logins 3.1.4
• displaying
  • allocatable devices 4.2.3
  • device policy 4.1.1
  • root access attempts 3.3.2
  • su command attempts 3.3.2
  • user's login status 3.1.2
  • users with no passwords 3.1.3
• dminfo command 4.4.2.6

---

E

• eeprom command 1.2.1, 3.4
• eject command
  • device cleanup and 4.4.2.8.2
• ELF signatures
  • verified boot 2.1.2
• enabling
  • device allocation 4.2.1
  • keyboard abort 3.4.2
  • TPM secure keystore for PKCS #11 customers 2.2.1.5
  • verified boot 2.1
• encrypting
  • files 1.4.1
  • passwords 3.2
• encryption
  • list of password algorithms 1.2.4.2.2
  • password hashes 1.2.4.2.1
  • specifying password algorithm
    • locally 3.2
  • specifying password algorithms in account-policy SMF stencil 1.2.4.2.2
• environment variables 1.2
  • PATH 1.3.5.1
• errors
  • allocate error state 4.4.2.5
• executable stacks
  • preventing insertion of malicious code 2.4.3.1
  • protecting against 32-bit processes 2.4.2
  • troubleshooting protection status 2.4.3.1
  • viewing protection status 2.4.3.1

---

F

• files
  • /etc/issue 3.1.1
  • /etc/motd 3.1.1
  • banner files 3.1.1
  • security
    • access restriction 1.3.5.3
    • ACL 1.3.5.3, 1.4.2
    • device map 4.4.2.6
    • encryption 1.4.1
• file systems
  • adding a virus scan engine 5.3.4
  • enabling virus scanning 5.3.3
  • excluding files from virus scans 5.3.7
  • scanning for viruses 5.3.2
  • securing using labeling 1.4.5
  • sharing files 1.4.3
• firewall systems
  • packet smashing 1.6.4
  • packet transfers 1.6.4
  • security 1.6.3
  • trusted hosts 1.6.3
• firmware
  • boot flow with verified boot 2.1.3
  • upgrade for verified boot 2.1.1
• forced cleanup
  • st_clean script 4.4.2.8.4

---

G

• gateways 1.6.3
• genunix module
  • verified boot and 2.1.3
• getdevpolicy command
  • description 4.4.1
• GRUB
  • Trusted Platform Module 2.2

---

H

• hardware
  • protecting 1.2.1, 3.4
  • requiring password for access 3.4.1
  • restricting user control of 3.1.1
  • security extensions for 2.5
• hosts
  • trusted hosts 1.6.3
• HW_BTI SPARC security extension 2.5.1

---

I

• IBPB security extension 2.5.2
• IBRS security extension 2.5.2
• IF_PSCHANGE_MC_NO security extension 2.5.2
• ILOM 2
• installing
  • Secure by Default 1.3.1
  • virus scanning software 5.3.1
• Intel Xeon CPU
  • CPU identifier 2.5.2
  • minimum microcode version 2.5.2
• Internet firewall setup 1.6.3
• IP MIB-II
  • getting information from /dev/arp 4.1.3

---

K

• KADI security extension 2.4.6
• kbd file 3.4.2
• kernel zones
  • verified boot 2.1
• KEYBOARD_ABORT system variable 3.4.2
• keys
  • migrating or restoring TPM 2.2.2.3
• KPTI security extension 2.5.2

---

L

• L1DF security extension 2.5.2
• labeling file systems 1.4.5
• layout of address space
  • load-time randomization 2.4.1
• LDAP naming service
  • passwords 1.2.4.1.3
  • specifying password algorithm 3.2.3
• ld -z sx=adistack linker option 2.4.5
• ld -z sx= linker options 2.4.8
• linker options
  • security extensions, for 2.4.8
  • security extensions, foradistack 2.4.5
• list_devices command
  • authorizations required 4.4.2.4.1
• listing
  • device policy 4.1.1
  • users with no passwords 3.1.3
• load-time randomization
  • address space layout 2.4.1
• log files
  • executable stack messages and 2.4.2
  • monitoring su command 3.3.1
  • process heap messages and 2.4.2
• logging in
  • disabling temporarily 3.1.4
  • displaying user's login status 3.1.2
  • remotely 1.2.4.5
  • root login
    • restricting to console 3.3.2
    • tracking 1.3.3
  • security
    • access control on devices 1.2.4.5
    • access restrictions 1.2.4
    • system access control 1.2.4
    • tracking root login 1.3.3
  • system access control 1.2.4
  • task map 3.1
• login access restrictions
  • svc:/system/name-service/switch:default 1.2.4
• login file
  • restricting remote root access 3.3.2
• logins command
  • authorization for 3.1.2
  • displaying user's login status 3.1.2
  • displaying users with no passwords 3.1.3
  • syntax 3.1.2

---

M

• managing 1.2
• man pages
  • device allocation 4.4.2.4
• MD_CLEAR security extension 2.5.2
• MD5 encryption algorithm
  • description 3.2.1
  • policy.conf file 3.2.1
• MDS_NO security extension 2.5.2
• media
  • device-clean scripts 4.4.2.8
• messages file
  • executable stack messages 2.4.2
  • process heap messages 2.4.2
• microphone
  • deallocating 4.3.3
• migrating
  • TPM data and keys 2.2.2.3
• minimum microcode version
  • Intel Xeon CPU 2.5.2
• mitigating platform vulnerabilities
  • SPARC specific 2.5.1
  • sxadm and 2.5
  • x86 specific 2.5.2
• modules
  • password hashes 1.2.4.2.1
• monitoring
  • compliance 1.3.10
  • root access 3.3
  • root access attempts 3.3.2
  • su command attempts 1.3.3, 3.3.1
  • system usage 1.3.9, 1.4.6
• mount command
  • with security attributes 4.2.2.1
• mounting
  • allocated CD-ROM 4.3.2
  • allocated devices 4.3.2
• mt command 4.4.2.8.1

---

N

• names
  • device names
    • device_maps file 4.4.2.7
  • devices in device_maps 4.4.2.6
• naming conventions
  • devices 4.2.3
• naming service configuration
  • login access restrictions 1.2.4
• naming services 1.2
• netservices limited installation option 1.3.1
• network security
  • authentication 1.6.2
  • authorizations 1.6.2
  • controlling access 1.6
  • firewall systems
    • need for 1.6.3
    • packet smashing 1.6.4
    • trusted hosts 1.6.3
  • overview 1.6.1
  • reporting problems 1.7
• NIS naming service
  • passwords 1.2.4.1.2
  • specifying password algorithm 3.2.2
• nobody user 1.4.4
• noexec_user_stack
  • compatibility with nxstack 2.4.3
• noexec_user_stack replacement 2.4.2
• nxheap
  • security extension 2.4.2
  • variable 2.4.3.1
• nxstack
  • compatibility withnoexec_user_stack 2.4.3
  • security extension 2.4.2
  • variable 2.4.3.1

---

O

• object reuse requirements
  • device-clean scripts
    • writing new scripts 4.4.2.8.4
  • for devices 4.4.2.8
• Oracle ILOM
  • preventing access to USB ports 2.3
  • Trusted Platform Module 2.2
  • verified boot 2.1.4
  • verified boot and 2.1.2
• ownership of files
  • ACLs and 1.4.2

---

P

• packages
  • crypto/tpm 2.2.1
  • device-allocation 4.2
  • pkcs11_tpm 2.2.1.5
  • trousers 2.2.1
  • virus-scan 5.3
• packet transfers
  • firewall security 1.6.3
  • packet smashing 1.6.4
• passwd command
  • and naming services 1.2.4.1.2
• password/crypt/algorithms_allow attribute
  • account-policy SMF stencil 1.2.4.2.3
• password/crypt/algorithms_deprecate attribute
  • account-policy SMF stencil 1.2.4.2.3
• password/crypt/default attribute
  • account-policy SMF stencil 1.2.4.2.3
• passwords
  • algorithms 1.2.4.2.2
  • changing with passwd -r command 1.2.4.1.2
  • constraining encryption algorithms in heterogeneous environment 3.2.1
  • displaying users with no passwords 3.1.3
  • encryption algorithms 1.2.4.2.1
  • finding users with no passwords 3.1.3
  • hardware access and 3.4.1
  • LDAP 1.2.4.1.3
    • specifying new password algorithm 3.2.3
  • local 1.2.4.1.1
  • login security 1.2.4, 1.2.4.1
  • NIS 1.2.4.1.2
    • specifying new password algorithm 3.2.2
  • parameter changes 1.2.4.2
  • PROM security mode 1.2.1, 3.4
  • requiring for hardware access 3.4.1
  • specifying algorithm 2.2.1.1, 2.2.2.3.1, 2.4.3.1, 3.2.1, 3.2.2, 3.2.3, 3.3.1, 3.3.2, 2.2.1.2, 2.2.1.3, 2.2.1.4
    • in naming services 3.2.2
    • locally 3.2
  • task map 3.1
  • using Blowfish in heterogeneous environment 3.2.1
  • using new algorithm 3.2.1
• PATH environment variable
  • and security 1.3.5.1
  • setting 1.3.5.1
• permissions
  • ACLs and 1.4.2
• physical security
  • description 1.2.1
• PKCS #11
  • Trusted Platform Module 2.2
• pkcs11_tpm package 2.2.1.5
• platforms
  • security extensions for 2.5
• policies
  • on devices 4.1.1
  • specifying password algorithm 3.2
• policy
  • verified boot 2.1.4
• policy.conf
  • specifying password algorithms 2.2.1.1, 2.2.2.3.1, 2.4.3.1, 3.2.1, 3.2.2, 3.2.3, 3.3.1, 3.3.2, 2.2.1.2, 2.2.1.3, 2.2.1.4
• policy.conf file
  • specifying encryption algorithms in 2.2.1.1, 2.2.2.3.1, 2.4.3.1, 3.2.1, 3.2.2, 3.2.3, 3.3.1, 3.3.2, 2.2.1.2, 2.2.1.3, 2.2.1.4
  • specifying password algorithm
    • in naming services 3.2.2
• pound sign (#)
  • device_allocate file 4.4.2.7
  • device_maps file 4.4.2.6
• pre-boot environment
  • verified boot 2.1.2
• privileged ports
  • alternative to Secure RPC 1.6.2
• process heaps
  • protecting against attack 2.4.2
• PROM security mode 3.4
• protecting
  • 32-bit executables from compromising security 2.4.2
  • BIOS, pointer to 3.4.1
  • PROM 3.4.1
• providers
  • pkcs11_tpm.so 2.2.1.5

---

R

• RDCL_NO security extension 2.5.2
• redirection
  • preventing 1.3.5.2
• rem_drv command
  • description 4.4.1
• remote logins
  • authentication 1.6.2
  • authorization 1.6.2
  • preventing root access 3.3.2
  • security 1.2.4.5
• removable media
  • allocating 4.3.1
• restoring
  • TPM data and keys 2.2.2.3
• restricted shell (rsh) 1.3.5.2
• restricting
  • remote root access 3.3.2
  • root access 3.3
• rights profiles
  • Administrator Message Edit 3.1.1
  • Device Management 4.4.2.3
  • Device Security 4.2.1, 4.4.2.3
  • using the System Administrator profile 3.4.1
• roles
  • using to access the hardware 3.4.1
• root access
  • monitoring and restricting 3.3
  • monitoring attempts 3.3.2
  • troubleshooting remote 3.3.2
• root account
  • description 1.2.4.3
• root user
  • displaying access attempts on console 3.3.2
  • monitoring su command attempts 1.3.3, 3.3.1
  • restricting access 1.4.4
  • restricting remote access 3.3.2
  • tracking logins 1.3.3
• RSBS security extension 2.5.2
• rsh command (restricted shell) 1.3.5.2

---

S

• scanning for viruses 5
• scripts for cleaning devices 4.4.2.8
• SCSI devices
  • st_clean script 4.4.2.7
• Secure by Default installation option 1.3.1
• securing
  • network at installation 1.3.1
  • passwords 3.1
• security
  • device control 4
  • devices 1.5
  • extensions 2.4
  • installation options 1.3.1
  • messages in banner files 3.1.1
  • netservices limited installation option 1.3.1
  • password hashes 1.2.4.2.1
  • preventing remote login 3.3.2
  • protecting against denial of service 1.3.7
  • protecting against Trojan horse 1.3.5.1
  • protecting devices 4.4.2.8
  • protecting hardware 3.4
  • protecting PROM 3.4
  • Secure by Default 1.3.1
  • system hardware 3.4
  • systems 1
• security attributes
  • using to mount allocated device 4.2.2.1
• security extensions
  • adiheap 2.4.4
  • adistack 2.4.5
  • aslr 2.4.1
  • compiling application with 2.4.8
  • enabling inheritance 2.4.7
  • framework 1.3.2
  • HW_BTI 2.5.1
  • IBPB 2.5.2
  • IBRS 2.5.2
  • IF_PSCHANGE_MC_NO 2.5.2
  • KADI 2.4.6
  • KPTI 2.5.2
  • L1DF 2.5.2
  • linker options 2.4.5, 2.4.8
  • MD_CLEAR 2.5.2
  • MDS_NO 2.5.2
  • nxheap 2.4.3.1
  • nxstack 2.4.2, 2.4.3.1
  • per object 2.4.8
  • platforms, for 2.5
  • preventing heap corruption 2.4.4
  • protecting ADI-based stacks 2.4.5
  • protecting against speculative execution vulnerabilities 2.5
  • protecting heaps and stacks 2.4.2
  • randomizing address space layout 2.4.1
  • RDCL_NO 2.5.2
  • RSBS 2.5.2
  • SMAP 2.5.2
  • SPARC specific 2.5.1
  • SSBD 2.5.1, 2.5.2
  • status flags 2.4
  • TAA_NO 2.5.2
  • TSX_DISABLE 2.5.2
  • x86 specific 2.5.2
• Security Extensions Framework 1.3.2
• security messages
  • on desktop at login 3.1.1
  • placing in banner files 3.1.1
• Service Management Facility (SMF) 1
• setuid permissions
  • security risks 1.3.6
• SHA-2 algorithms 1.2.4.2.2
• sharing files
  • and network security 1.4.3
• SMAP security extension 2.5.2
• SMF
  • device allocation service 4.4.2.2
  • managing Secure by Default configuration 1.3.1
  • password management 2.2.1.1, 2.2.2.3.1, 2.4.3.1, 3.2.1, 3.2.2, 3.2.3, 3.3.1, 3.3.2, 2.2.1.2, 2.2.1.3, 2.2.1.4
• SMF stencils
  • account-policy 1.2.4.2.2
• solaris.device.revoke authorization 4.4.2.4.1
• SPARC systems
  • mitigating vulnerabilities 2.5.1
  • security extensions for 2.5.1
  • verified boot 2.1
• speculative execution vulnerabilities, mitigated 2.5
• SSBD SPARC security extension 2.5.1
• SSBD x86 security extension 2.5.2
• st_clean script 4.4.2.7, 4.4.2.8.1
• standard cleanup
  • st_clean script 4.4.2.8.4
• starting
  • device allocation 4.2.1
• su command
  • displaying access attempts on console 3.3.2
  • monitoring use 3.3.1
• su file
  • monitoring su command 3.3.1
• sulog file 3.3.1
• Sun MD5 algorithm 1.2.4.2.2
• superuser 1
• svc:/system/device/allocate
  • device allocation service 4.4.2.2
• sxadm command
  • command overview 1.3.2
  • exec inheritance option 2.4.7
  • managing adiheap 2.4.4
  • managing adistack 2.4.5
  • managing security extensions 2.4.3.1
  • status flags 2.4
• system accounts
  • protecting 1.2.4.3
• System Administrator rights
  • protecting hardware 3.4.1
• system calls
  • ioctl to clean audio device 4.4.2.8.3
• system hardware
  • controlling access to 3.4
• system security
  • access 1
  • computer system access 1.2.1
  • displaying
    • user's login status 3.1.2
    • users with no passwords 3.1.3
  • firewall systems 1.6.3
  • hardware protection 1.2.1, 3.4
  • login access restrictions 1.2.4
  • overview 1, 1.2
  • password hashes 1.2.4.2.1
  • passwords 1.2.4.1
  • restricted shell 1.3.5.2
  • restricting remote root access 3.3.2
  • role-based access control (RBAC) 1.3.4
  • root access restrictions 1.4.4, 3.3.2
  • special accounts 1.2.4.3
  • su command monitoring 1.3.3, 3.3.1
• system variables 1.2
  • CRYPT_DEFAULT 3.2.1
  • KEYBOARD_ABORT 3.4.2

---

T

• TAA_NO security extension 2.5.2
• task maps
  • configuring device policy 4.1
  • device allocation 4.2
  • device policy 4.1
  • managing device allocation 4.2
  • managing device policy 4.1
  • securing logins and passwords 3.1
• tcsd daemon 2.2.2.1
  • Trusted Platform Module 2.2
• TPM 2
• tpmadm command
  • checking TPM status 2.2.1.2, 2.2.1.4
  • initializing TPM 2.2.1.4
  • reinitializing TPM 2.2.1.2
  • Trusted Platform Module 2.2
• Trojan horse 1.3.5.1
• troubleshooting
  • allocating a device 4.3.1
  • executable stack protection 2.4.3.1
  • list_devices command 4.2.3
  • mounting a device 4.3.2
  • preventing programs from using executable stacks 2.4.3.1
  • remote root access 3.3.2
  • terminal where su command originated 3.3.1
  • Trusted Platform Module 2.2.2
• TrouSerS package 2.2.2.1
• Trusted Computing Group Software Stack
  • Trusted Platform Module 2.2
• trusted hosts 1.6.3
• Trusted Platform Module
  • backing up TPM data and keys
    • SPARC based systems 2.2.1.3
  • components in Oracle Solaris 2.2
  • enabling TPM failover 2.2.2.2
  • initializing
    • x86 based systems 2.2.1.4
  • initializing and backing up 2.2.1
    • SPARC based systems 2.2.1.2
  • migrating or restoring TPM data and keys 2.2.2.3
  • monitoring status 2.2.2.1
  • owner of 2.2
  • PKCS #11 users 2.2.1.5
  • TPM packages in Oracle Solaris 2.2.1, 2.2.2.1
  • troubleshooting 2.2.2
• TSX_DISABLE security extension 2.5.2

---

U

• umount command
  • with security attributes 4.2.2.1
• unmounting
  • allocated devices 4.3.3
• update_drv command
  • description 4.4.1
• upgrading
  • firmware for verified boot 2.1.1
• USB ports
  • preventing access 2.3
• user accounts 1.2
  • displaying login status 3.1.2
• user ID numbers (UIDs)
  • special accounts and 1.2.4.3
• user procedures
  • allocating devices 4.2
• users
  • allocating devices 4.3.1
  • assigning allocate authorization to 4.2.2.1
  • deallocating devices 4.3.3
  • disabling login 3.1.4
  • displaying login status 3.1.2
  • having no passwords 3.1.3
  • mounting allocated devices 4.3.2
  • unmounting allocated devices 4.3.3

---

V

• variables
  • KEYBOARD_ABORT system variable 3.4.2
  • noexec_user_stack* deprecated 2.4.3
  • PATH environment variable 1.3.5.1
• verified boot
  • boot_policy 1.2.2
  • certificate sources 2.1.5
  • configuration properties 2.1.4
  • ELF signatures 2.1.2
  • enabling 2.1
  • firmware upgrade 2.1.1
  • manual certificate verification 2.1.5
  • Oracle ILOM and 2.1.2
  • Oracle ILOM and SPARC 2.1
  • policy 2.1.4
  • SPARC and x86 systems 2.1
  • SPARC systems with Oracle ILOM 2.1
  • verification sequence 2.1.3
  • verified boot certificate 2.1.4
• verifying
  • verified boot certificates manually 2.1.5
• viewing
  • device allocation information 4.2.3
  • device policy 4.1.1
  • user's login status 3.1.2
  • users with no passwords 3.1.3
• viruses
  • denial of service attack 1.3.7
  • Trojan horse 1.3.5.1
• virus scanning
  • described 5.2
  • engines 5.1
  • files 5.1
  • package 5.3, 5.3.1
• virus-scan package 5.3

---

X

• x86 systems
  • mitigating vulnerabilities 2.5.2
  • security extensions for 2.5.2
  • verified boot 2.1

---

Z

• zones
  • devices and 1.5
  • kernel and verified boot 2.1