Accepting Manual Updates - Solaris Security Toolkit

I have hardened a Solaris 10 server with Security Toolkit 4.2 and since then have
modified the system.
How do I get the Toolkit (Jass) to accept the changes?
I suspect that I must create a new driver and do a Jass Execute but I would like to approach
this problem with some certainty. FYI - I created some new slices and mounted them
but the changes to vfstab do not seem to stick.
Any advice is appreciated.
LB

I think I found the issue, only somewhat related to Security Toolkit ...
[http://groups.google.de/group/comp.unix.solaris/browse_frm/thread/93f6231c5bdc8409|http://groups.google.de/group/comp.unix.solaris/browse_frm/thread/93f6231c5bdc8409]
I activated smserver and the drive now works...
LB

Similar Messages

  • Solaris Security Toolkit 4.2

    Hi!
    I've downloaded the Solaris Security Toolkit 4.2 (http://www.sun.com/software/security/jass/) and I've installed on a Solaris 9 but when I try to run the jass-execute I got the folwong error:
    ./jass-execute: syntax error at line 974: `end of file' unexpected
    Could anyone help me?
    Thanks.

    I was running form /opt/SUNWjass/bin but it needs to be run from /opt/SUNWjass directory.

  • Solaris Security Toolkit 4.2 download format

    I've downloaded the newest release of the ToolKit for Sol10 and it appears to be in compressed tar format.
    (Solaris_Security_Toolkit_4_2_0_pkg.tar.Z)
    According to docs it should be in compressed package format and I should be able to do a pkgadd after uncompressing.
    What am I missing?
    Thanks in advance!
    s

    I think when I last installed SUNWjass (this was under solaris 9)I had to go into that directory (once moved to /opt) and run the install scripts something like:
    ~/jass-execute -d secure.driver (read the INSTALL file)
    and then it showed up in things like pkginfo .
    Hope this helps more.
    cheers
    Paul

  • Solaris Security Toolkit (JASS) for Solaris 11?

    Has anyone heard anything about an updated version of this for Solaris 11?
    Or I'm curious if anyone has tried running the Solaris 10 version on 11?
    Thanks

    Don't run the Solaris 10 version on Solaris 11, it will not work correctly.
    Many aspects of what SST did on Solaris 10 are part of Solaris 11. If there are things you need that aren't covered, I'd suggest opening a support case.

  • Installing VM SPARC 3.1.1 on T4-4 swith Solaris 5.10 update 11 (1/13) -  not having /etc/system updated with values - is this a manual update?

    Installing Oracle VM SPARC 3.1.1 on T4-4 swith Solaris 5.10 update 11 (1/13) -  not having /etc/system updated with values - is this a manual update or is there required patch?
    for /etc/system /etc/project for primary/control ldom and all guest ldoms, is there any patch that shold be installed to set memory settings when standing up guest-ldoms or the primary
    /controller ldom?  Running 8.6.0.b ILOM.
    On another system finding shmsys, hires_tick, semsys and a few exclude settings in /etc/system file for ldoms on another T4-4 running 8.5.0.c ILOM.  
    Hopefully I've just missed a patch.
    - JC

    /etc/system is by default "empty" and contents only commented parameters or instructions.
    And patches will not change this file. The shmsys, hires_tick, semsys and the other settings including /etc/project customizations that you have in the other machine was set manually or added during softwares configuration.

  • Impossible to update Solaris 10

    Hi,
    I have difficulties to update Solaris.
    When using the update manager, I get an error popup, but with a blank message .. not very easy to determine the problem ... and nothing logged in dmesg.
    When I try smpatch update, or smpatch analyze, I get an error message: "Failure: Response code was 500"
    And in dmesg I have the following
    Nov 18 19:03:05 localhost root: [ID 702911 user.error]  => com.sun.patchpro.util.CachingDownloader@9e5c73 <=Downloader.getResponseCode() : IOExceptionUnconnected sockets not implemented
    Nov 18 19:03:05 localhost last message repeated 2 times
    Nov 18 19:03:05 localhost root: [ID 702911 user.error]  => [email protected] <=UnifiedServerPatchServiceProvider.downloadFile: Unable to create cache downloader.
    Nov 18 19:03:05 localhost root: [ID 702911 user.error]  => [email protected] <=java.io.IOException: Response code was 500
    Nov 18 19:03:05 localhost     at com.sun.patchpro.util.CachingDownloader.setSourceURL(CachingDownloader.java:302)
    Nov 18 19:03:05 localhost     at com.sun.patchpro.util.CachingDownloader.setupCache(CachingDownloader.java:208)
    Nov 18 19:03:05 localhost     at com.sun.patchpro.util.CachingDownloader.<init>(CachingDownloader.java:187)
    Nov 18 19:03:05 localhost     at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadFile(UnifiedServerPatchServiceProvider.java:1242)
    Nov 18 19:03:05 localhost root: [ID 702911 user.error]  => [email protected] <=       at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadXmlFile(UnifiedServerPatchServiceProvider.java:586)
    Nov 18 19:03:05 localhost     at com.sun.patchpro.server.PatchServerProxy.downloadXmlFile(PatchServerProxy.java:168)
    Nov 18 19:03:05 localhost     at com.sun.patchpro.cli.PatchServices.downloadDocument(PatchServices.java:2118)
    Nov 18 19:03:05 localhost     at com.sun.patchpro.cli.PatchServices.downloadMotdDocument(PatchServices.java:2004)
    Nov 18 19:03:05 localhost     at com.sun.patchpro.cli.PatchServices.installPatches(PatchServices.java:1782)
    Nov 18 19:03:05 localhost root: [ID 702911 user.error]  => [email protected] <=null   at com.sun.patchpro.cli.PatchServices.main(PatchServices.java:715)
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => com.sun.patchpro.util.CachingDownloader@198cb3d <=Downloader.getResponseCode() : IOExceptionUnconnected sockets not implemented
    Nov 18 19:03:06 localhost last message repeated 2 times
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => com.sun.patchpro.server.UnifiedServerPatchServiceProvider@30d82d <=UnifiedServerPatchServiceProvider.downloadFile: Unable to create cache downloader.
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => com.sun.patchpro.util.CachingDownloader@13d28e3 <=Downloader.getResponseCode() : IOExceptionUnconnected sockets not implemented
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => com.sun.patchpro.server.UnifiedServerPatchServiceProvider@30d82d <=java.io.IOException: Response code was 500
    Nov 18 19:03:06 localhost     at com.sun.patchpro.util.CachingDownloader.setSourceURL(CachingDownloader.java:302)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.util.CachingDownloader.setupCache(CachingDownloader.java:208)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.util.CachingDownloader.<init>(CachingDownloader.java:187)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadFile(UnifiedServerPatchServiceProvider.java:1242)
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => com.sun.patchpro.server.UnifiedServerPatchServiceProvider@30d82d <=        at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadDatabaseFile(UnifiedServerPatchServiceProvider.java:928)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadPatchDB(UnifiedServerPatchServiceProvider.java:468)Nov 18 19:03:06 localhost     at com.sun.patchpro.server.PatchServerProxy.downloadPatchDB(PatchServerProxy.java:156)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.database.MemoryPatchDBBuilder.downloadPatchDBWithPOST(MemoryPatchDBBuilder.java:163)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.database.MemoryPatchDBBuilder.downloadPatchDB(MemoryPatchDBBuilder.java:752)
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => com.sun.patchpro.server.UnifiedServerPatchServiceProvider@30d82d <=        at com.sun.patchpro.database.MemoryPatchDBBuilder.buildDB(MemoryPatchDBBuilder.java:108)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.database.MemoryPatchDBBuilder.buildDB(MemoryPatchDBBuilder.java:181)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.database.GroupPatchDBBuilder.buildDB(GroupPatchDBBuilder.java:108)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.model.PatchProModel.downloadPatchDB(PatchProModel.java:1849)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.model.PatchProStateMachine$5.run(PatchProStateMachine.java:277)
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => com.sun.patchpro.server.UnifiedServerPatchServiceProvider@30d82d <=null    at com.sun.patchpro.util.State.run(State.java:266)
    Nov 18 19:03:06 localhost     at java.lang.Thread.run(Thread.java:619)Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => com.sun.patchpro.util.CachingDownloader@13d28e3 <=Downloader.getResponseCode() : IOExceptionUnconnected sockets not implemented
    Nov 18 19:03:06 localhost last message repeated 1 time
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => [email protected] <=UnifiedServerPatchServiceProvider.downloadFile: Unable to create cache downloader.
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => [email protected] <=java.io.IOException: Response code was 500
    Nov 18 19:03:06 localhost     at com.sun.patchpro.util.CachingDownloader.setSourceURL(CachingDownloader.java:302)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.util.CachingDownloader.setupCache(CachingDownloader.java:208)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.util.CachingDownloader.<init>(CachingDownloader.java:187)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadFile(UnifiedServerPatchServiceProvider.java:1242)
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => [email protected] <=       at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadRealizationDetectors(UnifiedServerPatchServiceProvider.java:1029)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.server.PatchServerProxy.downloadRealizationDetectors(PatchServerProxy.java:174)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.analysis.HostAnalyzer$RealizationSetAuto.downloadDetectorsWithPOST(HostAnalyzer.java:1212)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.analysis.HostAnalyzer$RealizationSetAuto.downloadDetectors(HostAnalyzer.java:1156)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.analysis.HostAnalyzer$RealizationSetAuto.prepare(HostAnalyzer.java:875)
    Nov 18 19:03:06 localhost root: [ID 702911 user.error]  => [email protected] <=       at com.sun.patchpro.analysis.HostAnalyzer.downloadDetectors(HostAnalyzer.java:299)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.model.PatchProModel.downloadDetectors(PatchProModel.java:1776)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.model.PatchProStateMachine$4.run(PatchProStateMachine.java:245)
    Nov 18 19:03:06 localhost     at com.sun.patchpro.util.State.run(State.java:266)
    Nov 18 19:03:06 localhost     at java.lang.Thread.run(Thread.java:619)Nov 18 19:03:07 localhost root: [ID 702911 user.crit]  => com.sun.patchpro.cli.PatchServices@11ca803 <=com.sun.patchpro.model.PatchProException: Response code was 500
    Nov 18 19:03:07 localhost     at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadFile(UnifiedServerPatchServiceProvider.java:1267)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadRealizationDetectors(UnifiedServerPatchServiceProvider.java:1029)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.server.PatchServerProxy.downloadRealizationDetectors(PatchServerProxy.java:174)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.analysis.HostAnalyzer$RealizationSetAuto.downloadDetectorsWithPOST(HostAnalyzer.java:1212)
    Nov 18 19:03:07 localhost root: [ID 702911 user.crit]  => com.sun.patchpro.cli.PatchServices@11ca803 <=       at com.sun.patchpro.analysis.HostAnalyzer$RealizationSetAuto.downloadDetectors(HostAnalyzer.java:1156)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.analysis.HostAnalyzer$RealizationSetAuto.prepare(HostAnalyzer.java:875)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.analysis.HostAnalyzer.downloadDetectors(HostAnalyzer.java:299)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.model.PatchProModel.downloadDetectors(PatchProModel.java:1776)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.model.PatchProStateMachine$4.run(PatchProStateMachine.java:245)
    Nov 18 19:03:07 localhost root: [ID 702911 user.crit]  => com.sun.patchpro.cli.PatchServices@11ca803 <=       at com.sun.patchpro.util.State.run(State.java:266)
    Nov 18 19:03:07 localhost     at java.lang.Thread.run(Thread.java:619)Nov 18 19:03:07 localhost Caused by:
    Nov 18 19:03:07 localhost java.io.IOException: Response code was 500
    Nov 18 19:03:07 localhost     at com.sun.patchpro.util.CachingDownloader.setSourceURL(CachingDownloader.java:302)
    Nov 18 19:03:07 localhost root: [ID 702911 user.crit]  => com.sun.patchpro.cli.PatchServices@11ca803 <=       at com.sun.patchpro.util.CachingDownloader.setupCache(CachingDownloader.java:208)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.util.CachingDownloader.<init>(CachingDownloader.java:187)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadFile(UnifiedServerPatchServiceProvider.java:1242)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.server.UnifiedServerPatchServiceProvider.downloadRealizationDetectors(UnifiedServerPatchServiceProvider.java:1029)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.server.PatchServerProxy.downloadRealizationDetectors(PatchServerProxy.java:174)
    Nov 18 19:03:07 localhost root: [ID 702911 user.crit]  => com.sun.patchpro.cli.PatchServices@11ca803 <=       at com.sun.patchpro.analysis.HostAnalyzer$RealizationSetAuto.downloadDetectorsWithPOST(HostAnalyzer.java:1212)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.analysis.HostAnalyzer$RealizationSetAuto.downloadDetectors(HostAnalyzer.java:1156)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.analysis.HostAnalyzer$RealizationSetAuto.prepare(HostAnalyzer.java:875)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.analysis.HostAnalyzer.downloadDetectors(HostAnalyzer.java:299)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.model.PatchProModel.downloadDetectors(PatchProModel.java:1776)
    Nov 18 19:03:07 localhost root: [ID 702911 user.crit]  => com.sun.patchpro.cli.PatchServices@11ca803 <=null   at com.sun.patchpro.model.PatchProStateMachine$4.run(PatchProStateMachine.java:245)
    Nov 18 19:03:07 localhost     at com.sun.patchpro.util.State.run(State.java:266)
    Nov 18 19:03:07 localhost     at java.lang.Thread.run(Thread.java:619)#Any idea ?
    Many thanks in advance !

    You may be interested to know that there is a forum specifically for problems with smpatch, updatemanager and the Sun UC Proxy (aka LPS) - [Administration Tools - Sun Update Connection-System / Hosted, Patch Manager & PatchPro Forum|http://forums.sun.com/forum.jspa?forumID=871]
    This problem is being tracked in Bug ID: #6771432
    It affects Java 6 Update 10, 11, and 12. The fix should be released in Update 14, in the mean time you can use the workaround from the bug:
    Edit the following lines:
    /usr/sbin/pprosvc: JAVACMD="/usr/jdk/latest/bin/java -version:1.5+"
    /usr/bin/updatemanager: JAVA_EXEC="/usr/jdk/latest/bin/java -version:1.5+"And change them to:
    /usr/sbin/pprosvc: JAVACMD="/usr/jdk/latest/bin/java -version:1.5*"
    /usr/bin/updatemanager: JAVA_EXEC="/usr/jdk/latest/bin/java -version:1.5*"The difference between the commands is that the '+' means any version of Java that is equal to or greater than 1.5, the '*' means it must be Java 1.5 but it will accept any minor version.
    As far as we are aware this has not been seen with any version of Java 5 (1.5.0_xx)

  • IPod Mini problems with 2nd computer (Manual Updating)

    The laptop I had been using to update my IPod Mini now doesn't let me use ITunes (firewall issues). So, I am now using a desktop.
    On the desktop, I have installed ITunes and IPod Updater. The connection seems to be working fine because my Ipod was updated.
    I purchased a few songs on ITunes and they will not download onto the IPod. I have it set for manual update (so not to lose all of my other music!) and am clicking and dragging. Yet, when I check my IPod's screen, no new music.
    Under File, "Update IPod" is in grey and is not an active option for me to select.
    What am I doing wrong? How do I get the new songs on my IPod?

    keep us posted on the desktop. we have a number of techniques for getting itunes to open if it's being interfered with by security software.
    In the meantime, I just emailed tech support about Deauthorizing that laptop. Do you think that could be my problem?
    good point. try playing those songs for a few seconds in itunes on the laptop. (sometimes itunes doesn't realise that they are authorised until you do that.)
    do they drag to the ipod properly then?
    love, b

  • ITunes update accepted and updated  but still have 12.01 and cannot open iTunes!

    On a MacMini 2010 era with Maverick 10.9.5 OS.
    Cannot open iTunes after "updating" to 12.1
    Just received an update notice for iTunes to new version 12.1, accepted the update and as required restarted computer.
    Tried to open iTunes - does not open.
    Checking the app info, the iTunes on my computer is still 12.0.1 and I'm unable to open iTunes app in any way.
    Checking the Apple Updates log online it is showing the apps with this update (iTunes 12.1, Safari 7.5.3, Security update 2015-001)  were logged as updated twice on the same date 2/12/15 in the updates record.
    The current version of Safari on my computer is NOT 7.5.3 but is still 7.1.2.  But at least Safari opens and works.
    2 days ago updated my Mac  Air without any problems.
    Help / advice appreciated

    Following another's suggestion I went to Apple online and downloaded iTunes 12.1 dmg  package and installed.
    Solved the iTunes issue, iTunes now opens and  operates.
    Correction: Safari update is 7.1.3 not 7.5.3.  However...
    As far as Safari update and Security update - who knows!  Safari is not an download option with Apple as far as I can tell.

  • I'm trying to add a playlist manually to my iPhone 4. It won't let me because it's trying to delete all of the music currently on my iPhone. Is there any way to prevent this from happening in order to start manually updating it?

    I'm trying to add a playlist manually to my iPhone 4. It won't let me because it's trying to delete all of the music currently on my iPhone. Is there any way to prevent this from happening in order to start manually updating it?

    Are you leaving the box unchecked to Manually manage music & videos? You don't need to to add anything to the iPhone.
    Simply drag the playlist to the iPhone to manually add it.

  • After updating latest security update for my OSX 10.7.5 one of my usb port is not working now.how do i know what is cause that usb port is not working after security update

    one of usb port in my macbook pro havent work after i ve updated latest security update for osx 10.7.5, how do i know what is cause that usb port is good or bad

    On a Mac running v10.7.2, the only way to reinstall Safari is to reinstall OS X using OS X Recovery.
    Safari 5.1.1 is for Snow Leopard. It will not run on a Mac with v10.7 installed.

  • Cannot delete songs from iPod when in manual update mode

    Hi
    I am using iTunes 7 and i'm trying to delete some songs just from my iPod and i have always used the manual update option.
    The problem is when i go into the songs on my iPod and go into a playlist and try to delete the songs within a playlist it won't let me. BUT when i search for those same songs within my iPod library (library shows all songs on the iPod) i can delete them.
    So my problem is i cannot delete songs within playlists just from my iPod. I know that deleting the playlist on the left hand side navigation bar will still keep the songs there, it will only delete the actual playlist.
    Also when i select a song(s) the edit menu is all greyed out except for copy.
    Can anyone help please.
    iPod 5th Generation + iTunes 7 Windows XP Pro
    Windows XP Pro
      Windows XP Pro  

    Try using the key combination Shift-Delete when deleting from a song from a playlist, this will delete it from the library as well.

  • Can someone plz confirm me that how i can change or update the security questions related to my apple id? as i have been never put them since i create my apple id but now due to some security reasons its asking me again and again the answers. i am unable

    can someone plz confirm me that how i can change or update the security questions related to my apple id? as i have been never put them since i create my apple id but now due to some security reasons its asking me again and again the answers. i am unable to go through the process. thanks.

    Some Solutions for Resetting Forgotten Security Questions: Apple Support Communities

  • How can I switch from Automatic to Manual update without losing songs?

    I have on my ipod songs from another computer, however I'm afraid to plug it into my computer because my computer is set to automatic update for my ipod. Is there a way for me to switch my ipod to manual update without losing songs on my ipod when plugging it in? thanks.

    Here is what you do:
    Open iTunes.
    Plug in your ipod.
    hold control and shift at the same time. this stops your ipod from updating automatically. Hold this until your ipod is finished docking.
    Then go to edit>preferences>ipod
    then change the setting from update automatically to update manually.

  • Turning back on the "manual update" feature in iTunes

    Ok, there's two iPods, mine and my sisters, and we both use the same iTunes. My iPod is set up to update automatically whenever I connect it to the computer and hers is set so that it doesnt automatically update when it's connected, but I just drag and drop certain songs into her iPod.
    Now, I tried putting a new video on her iPod and in the videos tab of her iPod in iTunes I clicked on upload all the videos, it wouldnt let me drag on drop.
    This has changed the settings on the iPod and now whenever i connect it to the computer it starts updating the iPod with my library.
    Is there any way of putting this setting back to the manual update function? As it is im scared to leave it connected for too long because i dont want it to erase songs she has on her iPod that i no longer have on my iTunes.
    Cheers people, thanks for any info you can give me.

    Just a thought - connect your own ipod, let it sync automatically and then change the itunes sync setting to manual. Maybe that changes the next syncing of your sister's ipod to manual as well?

  • Using a second computer with an ipod set to manual update

    I want to prevent my ipod 60GB video which is set to manual update on my G5 from being updated when I plug it into my powerbook. The powerbook assumes the ipod is available for auto update. How do I mount the iPod without iTunes automatically replacing its contents. I can't "preset" iTunes in its preferences to treat the iPod as a manual drive as it just says: "no iPod connected. As soon as I attach the iPod the auto update starts. Are there keystrokes to interrupt the update so I can set the iPod preferences on my Powerbook?
    Thanks
    Paul
    G5 Dual 2Ghz   Mac OS X (10.4.5)   iPod 60GB

    Hold down the ⌥ and ⌘ keys while connecting your iPod. Keep them down until iTunes has opened and your iPod shows in the Source list.

Maybe you are looking for