Solaris 9 Security CX-310-301 67
http://www.sun.com/solutions/blueprints/0601/jass_quick_start-v03.pdf
and for a full install, configure and run guide go to:
http://www.sun.com/solutions/blueprints/0601/jass_conf_install-v03.pdf
SST installs by default into /opt/SUNWjass and the current version at the time of writing is 4.0.1.
SST can be implemented in standalone mode or as part of a JumpStart configuration. The advantage of
using SST with JumpStart is that systems can be automatically hardened as part of the installation process.
Installing SST
To install SST, you must first download the software from the Sun website. Choose the package option for
the easiest install, which is delivered as a compressed file called:
SUNWjass-4.0.1.pkg.Z
Uncompress the file using the following command:
# uncompress SUNWjass-4.0.1.pkg.Z
which will leave the package file: SUNWjass-4.0.1.pkg
Now using pkgadd, install the software:
# pkgadd –d ./SUNWjass-4.0.1.pkg
Configuring SST
There are several directories in the SST which serve a different purpose. The most important ones are listed
here:
¾ Drivers – This contains the master scripts to determine which other scripts are called, from the
Finish directory and which files are to be replaced
¾ Files – This contains the files that will be replaced during the run
¾ OS – This contains Solaris operating system images for use with the JumpStart installation process
¾ Packages – This contains any additional software packages to be installed as part of the run. This
can include application software
¾ Patches – This contains recommended and security patch clusters, which should be extracted into
this directory. The patches will be applied as part of the jass run
¾ Profiles – This contains JumpStart profiles for use when installing using this method. A profile
includes such items as the cluster to install, the disk layout. One or more of the profiles must be
listed in the rules file, just like any other JumpStart profile
¾ Finish – This contains the scripts that will carry out the modifications and changes to the system
