Solaris 10 hardening

a few step..

1.NTP

To configure NTP on a Solaris server:

1. Create the file /etc/inet/ntp.conf with the following entries: ( using VI )
server 128.83.185.40
server 128.83.185.41
driftfile /etc/ntp.drift
2. Create the file /etc/ntp.drift with the following entry:
0.0
3. Restart the NTP service by issuing the following commands:
/etc/rc2.d/S74xntd stop
/etc/rc2.d/S74xntd start

2.SSH
sshd config file for the entire server is in /etc/ssh/sshd_config
like linux disable the permitrootlogin
also IgnoreRhosts yes


To stop and start sshd:

svcadm disable ssh
svcadm enable ssh

3.Terminal Audit trail1. Login as root
2. Type "touch /var/adm/loginlog" and press Return.
3. Type "chmod 700 /var/adm/loginlog" and press Return.
4. Type "chgrp sys /var/adm/loginlog" and press Return.
5. Make sure the log works by trying to log in to the system six times with the wrong password.
6. Type "more /var/adm/loginlog" and review the output to make sure the login attempts are being logged successfully