What's New in the Solaris Express 7/06 Release for Installation
Enhanced Security Using the Restricted Networking Profile
Starting with the Solaris Express 7/06, the generic installation has been changed so that all network services, except
Secure Shell, are disabled or restricted to respond to local requests only.
This change minimizes the potential vulnerabilities a remote attacker might try to exploit.
In addition, the change provides a base for customers to enable only the
services they require.
For Solaris Express releases, the hardening changes are automatically applied whenever a fresh
install is performed. This effect is achieved by invoking the netservices command from
the SMF upgrade file found in /var/svc/profile. Behavior is unchanged if the system is
upgraded.
All of the affected services are controlled by the Service Management Framework (SMF).
Any individual service can be enabled by using the svsadm(1M) and svccfg(1M) commands.
The netservices(1M) command can be used to switch the service startup behavior.
Installing Solaris Trusted Extensions
Starting with the Solaris Express 7/06 release, Solaris Trusted Extensions provides multilevel security for the Solaris OS. This feature
enables you to control information in a flexible but highly secure manner. You
can now enforce strict access controls to your data based on data sensitivity,
not just data ownership.
An installation that accesses Solaris Trusted Extensions differs from a standard installation. For
a list of these installation differences and further information about Solaris Trusted Extensions,
see Installing or Upgrading the Solaris OS for Trusted Extensions in Solaris Trusted Extensions Installation and Configuration.
Solaris Flash Can Create an Archive That Includes Large Files
The flarcreate command no longer has size limitations on individual files. You can
create a Solaris Flash archive that contains individual files over 4 Gbytes. The
following two archive utilities are available for use:
The portable archive interchange utility, pax, is the default. The archive can be created without size limitations on individual files.
The cpio archive utility is invoked with -L cpio option. Individual files cannot be greater than 2 or 4 Gbytes. The size limitation depends on the version of cpio used. This option is useful for backward compatibility issues.
For more information, see Creating an Archive That Contains Large Files in Solaris Express Installation Guide: Solaris Flash Archives (Creation and Installation)
