The Solaris Trusted Extensions is a reimplementation of Trusted Solaris 8, based on new security features in Solaris 10. It is an optional set of extensions to Solaris 10. The layered functionality consists of a set of label-aware services that are derived from Trusted Solaris 8.  This TechNow course will provide an existing Solaris 8 administrator (Trusted or Standard) an overview of the security architecture of Solaris 10 and the technical skills to administer Solaris 10 Trusted Extensions.   This course is extremely hands-on and provides the student with operational experience with Trusted Extensions and provides the understanding and administration skills of sensitivity labels that is integral the proper use of Solaris Trusted Extensions.

Duration: 5 Days

Security Architecture Overview
IP Filter and IPsec
Service Management Facility (SMF)
Process Rights Management
Non-Executable Stack
Pluggable Authentication Mechanism (PAM)
Reduced Installation Profile
Cryptographic Framework

Supporting Skills
RBAC
Overview, Roles, Profiles, Naming, Delegation & Databases
Zones
Overview, Planning, Configuration, & Administration

Trusted Extensions
Overview of Common Criteria CAPP, RBACPP, LSPP @ EAL 4+
Trusted Extensions Overview
Introduction to Labels (Types, Components, Uses)
Labeled Networking
Integration with Naming Services
Label-aware Filesystem Mounting & Sharing
Labeled Printing
Labeled Desktops: Java Desktop System & Common Desktop Environment
Label Configuration and Translation
Label-aware System Management Tools
Label-aware Device Allocation
Integration with existing Hardware, SunRays, & Applications
Overview of ZFS
Detailed use of privileges & rights compared to TSOL 8
Differences in auditing from TSOL 8
Command authorization usage (TSOL vs. Trusted Extensions)
Programmatic read-down & write-down between zones
Accessing date without authorization
Recommended programmatic communication between zones
Programmatic spawning of processes at different zone
Adding applications directly from CDE to the Trusted Path
Safeguarding & preventive security measures

S-295: Solaris System Administration II or equivalent knowledge plus
six months experience as a system administrator or one year or more or administrating the Solaris operating system.

TN-385: TCP/IP Analysis & Implementation is recommended, but not required.