Solaris Trusted Extensions Installation, Configuration, and Administration - SC-327-S10 Training Class

Module 1 - Introducing Trusted Extensions Features

• 
  History of Trusted Solaris and Trusted Extensions (TX)


• 
  Common Criteria requirements


• 
  Examine the importance of Mandatory Access Controls


• 
  Features of TX

Module 2 - Trusted Extensions Installation

• 
  Relationship between TX software and the Solaris 10 operating system


• 
  Determine the pre-installation implementation considerations


• 
  Install the TX packages

Module 3 - Trusted Extensions Configuration

• 
  Use the Solaris Management Console and other Trusted Extensions GUIs to
  configure TX options


• 
  Configure the network options for TX systems


• 
  Create labeled zones


• 
  Create system and security administration roles


• 
  Add users to assume roles

Module 4 - Access Controls

• 
  Differences between Discretionary Access Control (DAC) and Mandatory
  Access Control (MAC)


• 
  Use MAC components and features


• 
  Use the TX commands for manipulating and displaying labels


• 
  Module 5 - User Interface Changes: Trusted CDE and TJDS


• 
  Log into a TX system and use the CDE window manager


• 
  Log into a TX system and use the TJDS window manager


• 
  Understand how to change workspace labels


• 
  Log into the Trusted Path (global zone)


• 
  Capabilities of the global zone vs. the labeled zones


• 
  Set up automatic dotfile creation

Module 6 - Configuring and Installing the label_encodings File

• 
  Purpose and uses of the label_encodings file


• 
  Required and optional sections of the label_encodings file


• 
  Modify the label_encodings file to use your site labels, clearances, and
  settings

Module 7 - Configure Privileges, Authorizations, Rights Profiles, and Roles

• 
  Solaris TX privileges


• 
  Use privileges to limit the process rights


• 
  Configure the privileges sets of labeled zones


• 
  Create administrative roles to reduce the need for a superuser


• 
  Solaris TX authorizations


• 
  Grant authorizations to administrative accounts


• 
  Differences in the RBAC configuration files between the basic Solaris 10
  OS and Solaris TX

Module 8 - Perform Service Management in Solaris TX

• 
  Configure services in the global zone


• 
  Configure services in the labeled zones


• 
  Limit services in labeled zones for security reasons


• 
  Services specific to Solaris TX

Module 9 - Device Allocation

• 
  Security risks of removable-media devices


• 
  Grant users authorization to allocate removable-media devices


• 
  Add and configure additional devices to a Solaris TX system


• 
  Restrict access to individual devices to within specified label ranges

Module 10 - Auditing a Solaris Tx System

• 
  Review Solaris auditing


• 
  Audit configuration files


• 
  Configure the audit system to collect system usage data


• 
  Additional Solaris TX audit events


• 
  Enable and disable the audit function


• 
  Search and examine the audit records

Module 11 - Networking Solaris Trusted Extensions Systems

• 
  CIPSO network labeling protocol


• 
  How the MAC rules apply to network communications


• 
  Configure Solaris TX to communicate with other labeled systems


• 
  Configure Solaris TX to communicate with unlabeled systems


• 
  Set up multilevel ports


• 
  Administer the Solaris TX network configuration files


• 
  Configure routing


• 
  Configure networking between labeled zones and the global zone


• 
  Configure Solaris TX network interfaces


• 
  Grant and restrict access to the global zone from the network

Module 12 - NFS and LOFS File Systems

• 
  Share file systems from labeled zones using NFS


• 
  Mount NFS file systems from labeled and unlabeled NFS servers


• 
  Configure NFS-mounted home directories for users


• 
  Use the loopback filesystem (LOFS) in labeled zones to mount files from
  the global zone


• 
  Configure the automounter in labeled zones

Module 13 - Solaris TX Printing

• 
  Review Solaris 10 printer configuration


• 
  Security concerns of having printers available from labeled systems


• 
  How MACs and labels apply to printers and printed output


• 
  Utilize the Solaris TX modified printer management commands


• 
  Configure single-level and multilevel printers


• 
  Configure reduced restrictions on Solaris TX printers


• 
  Customize printer output

Module 14 - Configuring LDAP

• 
  Install the Sun Directory Server (LDAP) on a Solaris TX system


• 
  Populate the LDAP server with data


• 
  Configure SMC to use LDAP


• 
  Configure the Solaris TX LDAP proxy

Module 15 - Migrating from Trusted Solaris 8 to Solaris TX

• 
  Differences between Trusted Solaris 8 and Solaris TX


• 
  Configure Solaris TX systems to communicate with Trusted Solaris 8
  systems


• 
  Transfer Trusted Solaris user files to Solaris TX while preserving labels

Module 16 - Installing Unbundled Applications

• 
  MAC and labeling issues with respect to unbundled applications


• 
  Determine the requirements for unbundled applications on Solaris TX


• 
  Assign privileges to applications as needed


• 
  Install applications to run in the global zone or in labeled zones


• 
  Review developer concepts and resources for Solaris TX programming

System administrators and security administrators who are responsible for installing, configuring, and managing labeled systems. Systems integrators and designers of classified government systems or commercial systems with high-security data protection needs will also benefit from this course.

To succeed in the course, students should be able to:

• 
  Install the Solaris 10 operating system


• 
  Administer Solaris 10 systems


• 
  Display an understanding of data separation requirements in high-security
  environments


• 
  Perform basic Solaris network configuration tasks


• 
  Configure Solaris 10 system features such as zones and file systems