blob: e0f11ab7e40e4037539f0cb8d278fbb3ad554375 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License"). You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright 2004 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
Notes Regarding Modification of generic_open.xml
Any changes made to generic_open.xml will need to be considered for
inclusion in generic_limited_net.xml, the "Secure By Default" (see
http://solsec.eng.sun.com/sbd/) profile. The details are discussed
in PSARC/2004/781:
...
The generic_limited_net profile explicitly disables all
smf(7) converted inetd services that are not required to
run the window system, SVM, or vold. It retains ssh and
X remote login as the remote login methods available.
...
In general, _any_ service that allows inbound net access should be
added to generic_limited_net and disabled, unless its activation
has been:approved by SBD.
|
