PSARC/2008/494 GNU emacs

[Ceri Davies]

On Mon, Aug 04, 2008 at 10:32:24AM +0100, Darren J Moffat wrote:
> Garrett D'Amore wrote:
> > Since there is not yet any standard for minimizing Solaris -- at least 
> > as distributed by Sun (and indeed Solaris is already rather large), can 
> > I humbly suggest to the project team that they might want to consider 
> > dropping this portion of the project.  Other distribution builders that 
> > want to deliver a system without X11 will have a larger task ahead of 
> > them anyway, and can easily repackage emacs to their own taste if so 
> > desired.
> 
> Yes there is, while the URLs I mention below are out of date with 
> respect to the OS versions it mentions the techniques still apply:
> 
> -----
> Updated Solaris Operating Environment Minimization for Security: A 
> Simple, Reproducible and Secure Application Installation Methodolgy 
> Updated for Solaris 8 Operating Environment
> -by Alex Noordergraaf
> 
> http://www.sun.com/blueprints/1100/minimize-updt1.pdf
> -----
> 
> -----
> Solaris Operating Environment Minimization for Security: A Simple, 
> Reproducible and Secure Application Installation Methodology
> -by Keith Watson and Alex Noordergraaf
> Discuss OS minimization as a technique for reducing system 
> vulnerabilities; a simple method for duplicating these installations on 
> large numbers of servers is also introduced.
> 
> http://www.sun.com/blueprints/1299/minimization.pdf
> -----
> 
> There have been updates to this for Solaris 9 and 10 but they weren't 
> published as blueprints with "Minimization" in their titles.  There has 
> also been a lot of work done by 3rd Parties that Sun Security 
> Ambassadors and Solaris Security group have endorsed and participated in.

The Security community has also produced "Rules of Engagement for the
Support of Reduced or Minimal Configurations" - see
http://www.opensolaris.org/os/community/security/files/minimization-support-rules-ext.pdf

Ceri

-- 
That must be wonderful!  I don't understand it at all.
                                                  -- Moliere
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL: <http://mail.opensolaris.org/pipermail/opensolaris-arc/attachments/20080804/85cb5f3d/attachment.bin>