Gene, et al,

> Brian, for those of us who have not heard of JASS, and for the lists 
> enlightenment, could you discuss what it is and does without having to write 
> a 
> new War & Peace?

JASS is a set of scripts provided by SUN to harden systems.
There are several different driver choices, for desktops, servers,
etc which will enable/disable different services. I believe all
check system passwords, set password expiration and length, etc.
>From the look of it hundreds of items are checked/altered.

JASS can be run independently or can be specified as an option
during install or as an adjunct to creation of non-global zones.

JASS itself installs as a package from SUN.




On Wed, May 20, 2009 at 02:20:53PM -0400, Gene Heskett wrote:
> On Wednesday 20 May 2009, Brian Cuttler wrote:
> >We have a tendance to JASS our systems to secure them, amanda
> >ends up in an uninitialized state, with an enabled service and
> >no errors in its config, because JASS disables INETD. You have
> >to walk a whole new chain to find the errors these days.
> >
> >On Wed, May 20, 2009 at 10:40:27AM -0700, Paul Yeatman wrote:
> >> On Wed, 2009-05-20 at 11:58 -0400, Dustin J. Mitchell wrote:
> >> > On Wed, May 20, 2009 at 11:00 AM, McGraw, Robert P <rmcgraw AT purdue 
> >> > DOT edu> 
> wrote:
> >> > > [424][root@zorn]:index/zorn/_export_users-z# svcs -a | grep amanda
> >> > > online         Feb_11   svc:/network/amandaidx/tcp:default
> >> > > maintenance    May_19   svc:/network/amanda/udp:default
> >> > >
> >> > > cleared the maintenance mode and things are working.
> >> >
> >> > This seems to be a misfeature of the Solaris services -- it helpfully,
> >> > permanently shuts down a service due to a temporary failure, which
> >> > seems to be the opposite of resilience.  What's the deal?
> >> >
> >> > Dustin
> >>
> >> At least you were able to get it out of maintenance mode.  I was working
> >> with someone and, no matter how much we stared at the correct looking
> >> configuration, we could not clear it out of maintenance mode.
> >>
> >> Paul
> >
> >---
> >   Brian R Cuttler                 brian.cuttler AT wadsworth DOT org
> 
> Brian, for those of us who have not heard of JASS, and for the lists 
> enlightenment, could you discuss what it is and does without having to write 
> a 
> new War & Peace?
> 
> -- 
> Cheers, Gene
> "There are four boxes to be used in defense of liberty:
>  soap, ballot, jury, and ammo. Please use in that order."
> -Ed Howdershelt (Author)
> The NRA is offering FREE Associate memberships to anyone who wants them.
> <https://www.nrahq.org/nrabonus/accept-membership.asp>
> 
> The bomb will never go off.  I speak as an expert in explosives.
>               -- Admiral William Leahy, U.S. Atomic Bomb Project
> 
---
   Brian R Cuttler                 brian.cuttler AT wadsworth DOT org
   Computer Systems Support        (v) 518 486-1697
   Wadsworth Center                (f) 518 473-6384
   NYS Department of Health        Help Desk 518 473-0773



IMPORTANT NOTICE: This e-mail and any attachments may contain
confidential or sensitive information which is, or may be, legally
privileged or otherwise protected by law from further disclosure.  It
is intended only for the addressee.  If you received this in error or
from someone who was not authorized to send it to you, please do not
distribute, copy or use it or any attachments.  Please notify the
sender immediately by reply e-mail and delete this from your
system. Thank you for your cooperation.