How to check/start/stop hardening Service?

Dear All,
I want to check on Solaris 10 whether it has hardening service or not, and also want to start/stop this service.
Please give any idea or advice.
Thanks and regards,
Heng

Hi Heng,
System hardening requirements changes from environment. So It should be designed to suit your infrastructure. The topic is too big to discuss here.
I will give some examples of major things done in hardening.
User level Security.
1) Password complexity
2) Restrict multiple login attempts.
3) Log all failed login attempts
4) configure pam module
5) Use RBAC to deligate
6) Restrict root login to console only.
7) disable passwordless logins to any users
8) disable services like rsh rlogin and related services and restrict access through ssh only.
9) ENABLE & Configure BSM
10) Enable Auditing
11) disable/lock all unused system accounts.
12) enable password encryption (/etc/shadow)
Network Security
1) Disable all unwanted services. (svcadm disable service on solaris 10)
2) disable unused nonsecure services like telnet, ftp etc.
3) tcpwrapers (restrict the network communication to the required subnets only)
4) disable unwanted inetd services
etc etc etc... discussed very few things from the normal hardening, and these things vary from environment to environment.
Regards
JKGN
Edited by: 878434 on May 25, 2012 1:16 AM

Similar Messages

SQL Command to Start/Stop SQL services for multiple server

From Central server I want to Start/Stop SQL services and SQL Agent service. Is there any SQL command which I can execute on query analyzer which can Start/Stop SQL services?
Rahul

See command line options here using net start
http://msdn.microsoft.com/en-IN/library/hh403394.aspx
You can invoke them using xp_cmdshell from management studio as
ie like below for default instance
EXEC xp_cmdshell 'net start MSSQLSERVER'
EXEC xp_cmdshell 'net start SQLSERVERAGENT'
etc
and below for named instance
EXEC xp_cmdshell 'net start MSSQLSERVER$instancename'
EXEC xp_cmdshell 'net start SQLSERVERAGENT$instancename'
etc
and use net stop for stopping services
EXEC xp_cmdshell 'net start MSSQLSERVER' EXEC xp_cmdshell 'net start SQLSERVERAGENT' etc
EXEC xp_cmdshell 'net start MSSQLSERVER' EXEC xp_cmdshell 'net start SQLSERVERAGENT' etc
EXEC xp_cmdshell 'net start MSSQLSERVER' EXEC xp_cmdshell 'net start SQLSERVERAGENT' etc
Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

CF8 dev edition - how do you start / stop server?

mac osx - CF8 dev edition - how do you start / stop server?
I would like to turn off CF8 auto start on boot up and
manually be able to start and stop the server...
Q: How do I set this up?

> Now, I am also interested in turning off CF8.01 "auto
start on boot up"
> (currently set to that now)
>
> Q: How do I turn this auto start off?
>
> Hi folks - I'm still interested in setting the CF server
on MAC OSX 10.5 to
> *NOT* Auto Start - How do I turn this auto start off?
I googled "cf8 osx don't autostart", and turned up this:
http://www.feed-squirrel.com/index.cfm?evt=viewItem&ID=96307
Does that make sense? It's all a bit Greek to me because I've
not used a
Mac for...
crikey...
TWENTY YEARS.
Adam
(suddenly feeling rather old)

Creating a Business Service for Start/Stop Application Service in CCB 2.3.1

Hi,
I'm in the process of creating a BPA script that invokes a Business Service to perform a Start/Stop for a given Account ID/Premise ID combination. The Business Service is using the base Application Service: Start Stop (CILCSSEP). I am moving the Account ID and Premise ID, along with the start date and requested by fields to the data area of the Business Service, prior to invoking it. When I invoke the Business Service via the BPA script, it throws the below error message... I'm at a loss because the BILL_ADDR_SRCE_FLG is being set to a default of "PREM" on the Business Service Schema:
A Bill Address Source is required on the address override record. Please enter a valid value.
One of these two is true:
1) The Bill Route Type on this record has a Bill Routing Method of 'Postall', or
2) The main customer on the Account has a Quote Route Type with a Quote Routing Method of 'Postal'.
In either case, the Bill Address Source must be populated with a valid value.
If you need support please supply the following info to system support:
Message number: 3, 59204
Business Service: CMSTARTSERVICE
Application Service: CILCSSEP
Schema:
<schema pageAction="fastChange">
<accountId mapField="ACCT_ID"/>
<df mapField="DEFAULT_FOR_FLG"/>
<startDate mapField="STRT_START_DT"/>
<startOption mapField="STRT_TYPE_FLG"/>
<premiseId mapField="STRT_PREM_ID"/>
<premAddress mapField="ADDRESS1"/>
<premCity mapField="CITY"/>
<startCisDiv mapField="STRT_CIS_DIVISION"/>
<startReqBy mapField="STRT_STRT_REQ_BY"/>
<bldStrtSaSw mapField="BUILD_START_SA_SW" default="true"/>
<accountIdtwo mapField="ACCT_ID2"/>
<mainCustPerId mapField="MAIN_CUST_PER_ID"/>
<billFrmtFlg mapField="BILL_RTE_TYPE_CD" default="POSTAL" private="true"/>
<billAddrSrcFlg mapField="BILL_ADDR_SRCE_FLG" default="PREM"/>
<billAddrSrcFlg2 mapField="BILL_ADDR_SRCE_FLG2" default="PREM"/>
<startStopTelephoneOverride type="list" mapList="OVRD_PHONE">
<accountId mapField="ACCT_ID"/>
<sequence mapField="SEQ_NUM"/>
<phoneType mapField="PHONE_TYPE_CD"/>
<internationalPrefix mapField="COUNTRY_CODE"/>
<phone mapField="PHONE"/>
<extension mapField="EXTENSION"/>
<version mapField="VERSION"/>
</startStopTelephoneOverride>
<startBtn mapField="ACTION_START_SW" default="true" private="true"/>
</schema>
I'm running CC&B 2.3.1 - Any help in pointing me in the right direction to get this working would be greatly appreciated, Thanks!
Regards,
Jack

Hi,
Can you try and do this transaction online and see if the error occurs as well? If so run it with traces on and check for the details just before the error is thrown. ( you can also switch on debug via the service call, but it may be easier to debug when doing this online. ) I am predicting this error will occur also when you do it online.
When you are using an Account with its main Person set up with BILL_ADDR_SRC_FLG as PREM you will need a valide PREM_ID on the CI_ACCT record for MAILING_PREM_ID and the premise needs to have a switch set to YES indicating it is a Mailing Address type Premise.
Good luck
Arjen

Mail service on start/stop of services ...

Hi,
Please let me know the way to send mail when services are started/stopped in oracle application 11.5.10.2. How to configure this on ibm aix 5.3.
Thanks,
Sai Ram

There is a way to configure emails on startup/shutdown of Concurrent Manager service - but I'm not aware about any such configuration around other services (eg. Apache, Apps Listener, Forms Server etc..)
I think you'll have to do this outside Oracle's scripts if you wish to set this up - either by wrapping the calls to seeded scripts in your own custom script, or if you want a periodical probing, then via use of cron/scheduler depending on the OS you're on.
Hope that helps.
Regards,
Rakesh
PS : In addition to the Concurrent Managers, I think you should be also able to achieve this for database services if you wish to do that - by use of startup and shutdown database triggers.

Automate start/stop essbase service using Maxl or batch

Hi - how would my batch or Maxl file look like if I wanted to come out with a script to stop and start my essbase service? The reason why i am doing this is because I wanted to stop the essbase service, so that I can archive the essbase.log file.
I am on essbase 7.0, I have read on some postings that stopping and starting the essbase service can potentially corrupt the sec file. If so, then is there any other way of archive the essbase.log file so that it does not grow to megs.
Thanks.

Hi,
You could use the following maxl
alter system shudown;
it may be useful to stop all the applications first e.g.
alter system unload application all;
or you can use windows command line
net stop essbaseservicename
and to start
net start essbaseservicename
Another method to backup the essbase.log is to make a copy of the log then use maxl to delete the log.
alter system clear logfile;
Cheers
John
http://john-goodwin.blogspot.com/

How to programatically start j2ee application/service from command line

Hi all
We have developed a j2ee application and deployed the .ear file on SAP J2EE (Netweaver'04) engine.
We are able to successfully start/stop the application from Visual administrator -> Deploy -> Service -> Start application (or) Stop application.
We need to start and stop the same application programatically or via command line instead of doing it from VA. Any thoughts from anyone on how to do it ?
Thanks in advance.
Regards
Nagesh

The cammands are there in the respective folders, these are just the batch files / .sh scripts that can be run from command line.
/usr/sap/<instance>JC<client>/j2ee/admin
go.sh and go.bat can run either on command line
j2ee/configtool
configtool.sh / configtool.bat
similarly for other smaller utilities. For the main server, the related commands are in exe directory of sapmnt
/sapmnt/<instance>/exe
Regards,
Nitin
Edited by: Nitin Mahajan on Jun 16, 2009 11:16 PM

Start / Stop Window services

Hi,
I would like to start and stop window services on remote computer.
Do you know if there is a package API in java to do it?
How can I do it?
Thanks,
Anat

Look for www.jscape.com
you can ftp or telnet to the computer, then start the command for that service
this is the code for ftp
* FtpExample.java
* Created on 01 March 2007, 10:30
* To change this template, choose Tools | Template Manager
* and open the template in the editor.
package testing;
* @author Administrator
import com.jscape.inet.ftp.*;
import java.io.*;
import java.util.Enumeration;
public class FtpExample extends FtpAdapter {
    private String hostname;
    private String username;
    private String password;
    public FtpExample(String hostname, String username, String password) {
        this.hostname = hostname;
        this.username = username;
        this.password = password;
    // print out directory listing
    public void getListing() throws FtpException {
        Ftp ftp = new Ftp(hostname,username,password);
        //capture Ftp related events
        ftp.addFtpListener(this);
        ftp.connect();
         ftp.setDir("www");
        String results = ftp.getDirListingAsString();
        System.out.println(results);
        ftp.disconnect();
    // captures connect event
    public void connected(FtpConnectedEvent evt) {
        System.out.println("Connected to server: " + evt.getHostname());
    // captures disconnect event
    public void disconnected(FtpDisconnectedEvent evt) {
        System.out.println("Disconnected from server: " + evt.getHostname());
    public static void main(String[] args) {
        String hostname;
        String username;
        String password;
        try {
            FtpExample example = new FtpExample("ftplocation e.g 192.168.0.1","username","password");
            example.getListing();
        }catch(Exception e) {
            e.printStackTrace();
}

How can i start several oc4j services?

Dear,
I will start several oc4j services in one computer.how can I do it?
for example:
1.oc4j directory is: oc4j_pcc and oc4j_ims
2.I modify the files,jndi.properties,jms.xml,rmi.xml and http-web-site.xml,which port is different.
then oc4j_pcc and oc4j_ims service can start.but I can not connect server.why?
exception is:
java.lang.InstantiationException: Error communicating with server: Lookup error: java.io.EOFException: Disconnected; nested exception is:
     java.io.EOFException: Disconnected; nested exception is:
     javax.naming.NamingException: Lookup error: java.io.EOFException: Disconnected; nested exception is:
     java.io.EOFException: Disconnected
I think that configuration is wrong.but I do not know i can modify else.
can you help me? thanks!
Benson

try this link
http://www.kcmultimedia.com/javaserv/index.html
U can download an utility with the help of wich java programs can be executed as NT services
I tried it with orion server with moderate success. I was able to start it as a service but when i stopped or restarted the service the orion server ended abruptly.
so each time i got a message "Forced or abrubt (crash etc) server shutdown detected". except for this, it worked fine as a service
raees

HT204053 How do I start a cloud service ?

How do I start a cloud so I can hear my music from anywhere

You would have to delete your current iCloud account from your phone "Settings > iCloud > Delete Account" in order to setup and use your old iCloud account for all the iCloud services again.
Of course you could also add your old account only for Mail as a secondary account in "Settings > Maiil, Contacts, Calendars > iCloud" and continue using your new account for all other iCloud service, but I assume that you prefer option 1.

How to adjust Start/Stop position of a song on the iPhone (not iTunes)?

Hello all,
Before I caught my flight today, I decided to make a ringtone of my new favourite song. Obviously one of the steps in doing so involves selecting a specific start and stop position within iTunes be fore creating the ringtone.
So I got on the plane and realised that I didn't remove the start/stop positions on the song after creating the ringtone. Now i'm stuck with only a 40s interval being able to be played!
Please tell me there is a way to change the start/stop position of the song within the actual iPhone as I won't have access to my iTunes library for quite some time!
Any help appreciated.
Regards
iPhone 3G2 32bg, 3.1.2

No

How can I start the Oracle services for windows?

I started the oracle services by order :
ifs:
1.tnslistener
2.iasdb
3.oid
4.processmanager
5.OEMwebsite
mid:
1.webcache
2.discoverer
3.processmanager
Is the order correct?

Hi Michael,
I think, then, that the problem is one of permissions. What I've done on Windows 7 installations is to go to the InDesign application folder (in program files), select the InDesign.exe file, use the Context menu (right-click) to display the Properties panel, and then turn on the Run This Program as an Administrator option in the Privelege Level section of the Compatibility tab. Click the Change Settings for All Users button to apply the change (assuming that your current user profile is an Administrator).
Let me know if that helps!
Thanks,
Ole

How to check the SAI REST service is working ?

Hi All,
Please find the below link and give me some solution for this
How to check the SAI REST is working ?
Regards,
Gopinath

give me some solution for thisThe other forum is the right place, not here.

How should I start, stop or restart SQL services if it is in a cluster?

Hi,
For migration purpose I need to stop sql server services in a cluster. I don't want to failover the cluster I just want to stop the sql server services before the windows system admin shutdowns the windows server and later start again once migration is done.
This is clone migration so I don't have to do anything except stopping and starting the services of sql. I found two places there to take service offline and online, one is just clicking the services and application and in the right hand side directly right
clicking the instance and take service offline, another is expanding the instance and taking offline agent and sql server service one by one.
I don't know which is the way.
Please some one help me.

Hello,
You can use SQL Server Configuration Manager, SQL Server Management Studio, Cluster Administrator.
Do not use the Services applet in Control Panel.
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

How to implement start & stop ai triggers when # scans unknown

I can't seem to find an implementation example for this application.
Some are close but seem to have a big gap on close examination.
The application is to log an unknown number of samples for a
single rotation of a variable speed drum. The drum is connected
to a tachometer which generates 1 pulse per revolution and is the
trigger source.
The user will initiate the data collection and only a single
rotation's
worth of data need be collected and displayed.
The board is a PCI 6111E sampling a single input at ~2 Megahz.
All the examples I've found using a start and stop trigger depend
on knowing how many scans to acquire.
Is there any way to get around that? It seems so simple to
have a
start and stop pulse, a scan rate constant, and just get
the data out of a buffer. But it does not seem to be that simple
or am I missing something here?
There is also an issue with the identical tach signal being used
for both the start and stop trigger. I think that can be gotten
around by using a divide by n counter and feeding that to
trigger config vi but if anyone has any suggestions for that,
they would be greatly appreciated.
Gene Couch

I'm afraid I can't help you beyond that. We use NI boards and NI-DAQ library
of functions in custom control systems with software written in C++. I have
not had opportunity to use LabView. Sorry.
gcouch wrote:
>On 5 Jun 2000 09:38:46 -0500, "J. Wolters" >wrote>Thank
you for the response but I'm not sure what the DAQ_Rate function>is. With
LabVIEW 5.1 it does not appear in the DAQ pallette and I>cannot find it in
the example vi's. Do you know where it can be>found?>>>>>>Have you looked
that DAQ_Rate function? You should be able to use this function>>to obtain
your # of samples.>>>>>>gcouch wrote>>I can't seem
to find an implementation example for this application.>Some>>a
re close but
seem to have a big gap on close examination.>>The application>>is to log
an unknown number of samples for a >single rotation of a variable>>speed
drum. The drum is connected>to a tachometer which generates 1 pulse>>per
revolution and is the>trigger source.>>The user will initiate the data>>collection
and only a single>rotation's>worth of data need be collected and>>displayed.>>The
board is a PCI 6111E sampling a single input at ~2 Megahz.>> >>All the examples
I've found using a start and stop trigger depend>on knowing>>how many scans
to acquire.>>Is there any way to get around that? It seems>>so simple to>have
a start and stop pulse, a scan rate constant, and just>>get>the data out
of a buffer. But it does not seem to be that simple>or>>am I missing something
here?>>There is also an issue with the identical tach>>signal being used>for
both the start and stop trigger. I think that can>>be gotten>around by using
a divide by n counter and feeding that to>trigger>>config v
i but if anyone
has any suggestions for that,>they would be greatly>>appreciated.>>Gene Couch>>>

How to check/start/stop hardening Service?

Similar Messages

Maybe you are looking for