System Administration Guide: Security Services Updates

The following sections list the updates to Solaris 9 operating environment features that are described in this book.

Solaris 9 12/02 Updates

• New password encryption modules are described in Maintaining Login Control.

  How to specify a module for encrypting passwords is described in Changing the Default Algorithm for Password Encryption.

• Password policy is enforced on the Sun ONE Directory Server. The change is described in Managing Password Information.

• A new binding control flag in PAM is described in PAM Control Flags.

Solaris 9 8/03 Updates

• Public files are no longer audited for read-only events. The -public option to the auditconfig command controls whether public files are audited. By not auditing public files, the audit trail is greatly reduced. Attempts to read sensitive files are therefore easier to monitor. See BSM Terminology.

• The praudit command has an additional output format, XML. The XML format enables the output to be read in a browser, and provides source for XML scripting for reports. The -x option to the praudit command is described in The praudit Command.

• The default set of audit classes has been restructured. Audit meta-classes provide an umbrella for finer-grained audit classes. See Definitions of Audit Flags.

• The bsmconv command no longer disables the use of the Stop-A key. The Stop-A event is now audited to maintain security.