What's New in the Solaris Express 7/06 Release for Installation

Enhanced Security Using the Restricted Networking Profile

Starting with the Solaris Express 7/06, the generic installation has been changed so that all network services, except Secure Shell, are disabled or restricted to respond to local requests only. This change minimizes the potential vulnerabilities a remote attacker might try to exploit. In addition, the change provides a base for customers to enable only the services they require.

For Solaris Express releases, the hardening changes are automatically applied whenever a fresh install is performed. This effect is achieved by invoking the netservices command from the SMF upgrade file found in /var/svc/profile. Behavior is unchanged if the system is upgraded.

All of the affected services are controlled by the Service Management Framework (SMF). Any individual service can be enabled by using the svsadm(1M) and svccfg(1M) commands. The netservices(1M) command can be used to switch the service startup behavior.

Installing Solaris Trusted Extensions

Starting with the Solaris Express 7/06 release, Solaris Trusted Extensions provides multilevel security for the Solaris OS. This feature enables you to control information in a flexible but highly secure manner. You can now enforce strict access controls to your data based on data sensitivity, not just data ownership.

An installation that accesses Solaris Trusted Extensions differs from a standard installation. For a list of these installation differences and further information about Solaris Trusted Extensions, see Installing or Upgrading the Solaris OS for Trusted Extensions in Solaris Trusted Extensions Installation and Configuration.

Solaris Flash Can Create an Archive That Includes Large Files

The flarcreate command no longer has size limitations on individual files. You can create a Solaris Flash archive that contains individual files over 4 Gbytes. The following two archive utilities are available for use:

• The portable archive interchange utility, pax, is the default. The archive can be created without size limitations on individual files.

• The cpio archive utility is invoked with -L cpio option. Individual files cannot be greater than 2 or 4 Gbytes. The size limitation depends on the version of cpio used. This option is useful for backward compatibility issues.

For more information, see Creating an Archive That Contains Large Files in Solaris Express Installation Guide: Solaris Flash Archives (Creation and Installation)