JASS

Solaris Security Kit
 * Download and install "Solaris Security Toolkit" (Current version is 4.2) from here (docs)
 * CD to /opt/SUNWjass/Drivers/ and edit the hardening.driver file (if doesn't exist, there use example file in the same directory).
 * Insure the following lines are commented out (unless service will be needed):
 * # disable-keyboard-abort.fin
 * # disable-nfs-client.fin
 * # disable-picld.fin
 * # disable-rpc.fin
 * # disable-sendmail.fin
 * # enable-password-history.fin
 * # print-rhosts.fin
 * # set-user-password-reqs.fin
 * # enable-bsm.fin
 * # install-strong-permissions.fin
 * # enable-bart.fin


 * To run the script: /opt/SUNWjass/bin/jass-execute -d secure.driver
 * To audit: jass-execute -a secure.driver
 * To uninstall: jass-execute -u
 * After running JASS and before rebooting
 * If you need to be able to SSH into the box while setting it up then in /etc/ssh/sshd_config look for a line "PermitRootLogin no" and change it to be "PermitRootLogin yes". Be sure to set this back to no afterwards.
 * Make sure in /etc/hosts.allow there's a line "sshd:          ALL"
 * Reboot the system