Security Review: Solaris 8 Setuid/Setgid Files
Information Systems and Technology
University of Waterloo

See Also

Some further reading for the brave or curious:

• YASSP: Yet Another Solaris Security Package Jean Chounard
• Solaris 2 FAQ Casper Dik
• SUNSOLVE ONLINE (vendor's site)
• Sun Product Documentation (vendor's site)
• The Solaris Security FAQ (sunworld -- Peter Baer Galvin)

We have companion papers for Solaris 2.6 and Solaris 7 on the same issue -- hardening by minimizing setuid/setgid files. We also have a paper on Solaris Network Hardening -- hardening a system by removing network services.

Any questions or concerns about this documentation should be addressed to the author.