Solaris Trusted Extensions Installation and Setup

Please note that Oracle courses running at London training centres are subject to a 10% surcharge.

Overview

The Solaris Trusted Extensions Installation and Setup course provides students with the knowledge to install Solaris Trusted Extensions software onto a system running the Solaris 10 Operating System. The course provides an overview of the features and functionality of Solaris Trusted Extensions. The factors that affect installation and configuration decisions are covered in detail. Various configuration options are presented along with the advantages and disadvantages of each option. After installing the Trusted Extensions software, the systems are configured with labeled zones and the course begins to examine different network configurations. The course teaches students how to design and configure the security label mechanisms, and how to use extended security features of the two supported window managers: Trusted CDE and Trusted JDS.  

Who Can Benefit
Students who can benefit from this course are system administrators and security administrators who are responsible for installing, configuring and managing labeled systems. Systems integrators and designers of classified government systems or commercial systems with high-security data protection needs will also benefit.

Prerequisites

• Install the Solaris 10 operating system
• Administer Solaris 10 systems
• Display an understanding of data separation requirements in high-security environments
• Perform basic Solaris network configuration tasks
• Configure Solaris 10 system features such as zones and file systems  

Recommended prerequisite courses include:

• Solaris 10 Features for Experienced Solaris System Administrators (SA-225-S10)
• Solaris 10 ZFS Administration (SA-229-S10)
• Solaris 10 Containers (SA-230-S10) 

Delegates will learn how to

• Install the Trusted Extensions package onto a Solaris 10 system
• Create labeled zones
• Configure labeled zones
• Configure labeled networking in the labeled zones
• Login to Trusted Extensions and use the TX-specific features of the Trusted CDE and Trusted JDS window environments
• Design a security labeling scheme
• Implement a security labeling scheme with the label_encodings data base

Course outline

Module 1 – Introducing Trusted Extensions Features

• Describe the history of Trusted Solaris and Trusted Extensions
• Describe the Common Criteria requirements
• Examine the importance of Mandatory Access Controls
• Describe the features of Trusted Extensions

Module 2 – Trusted Extensions Installation

• Understand the relationship between Trusted Extensions (TX) software and the Solaris 10 Operating System
• Determine the pre-installation implementation considerations
• Install the Trusted Extensions packages

Module 3 – Trusted Extensions Configuration

• Use the Solaris Management Console and other Trusted Extensions GUIs to configure TX options
• Configure the network options for TX systems
• Create labeled zones
• Create system and security administration roles
• Add users to assume roles

Module 4 – Access Controls

• Describe the differences between Discretionary Access Controls (DAC) and Mandatory Access Controls (MAC)
• Use Mandatory Access Control) components and features
• Use the Trusted Extensions commands for manipulating and displaying labels

Module 5 – User Interface Changes: Trusted CDE and TJDS

• Log in to a TX system and use the CDE window manager
• Log in to a TX system and use the TJDS window manager
• Understand how to change workspace labels
• Log in to the Trusted Path (global zone)
• Understand the capabilities of the global zone versus the labeled zones
• Set up automatic dotfile creation

Module 6 – Configuring and Installing the label_encodings File

• Understand the purpose and uses of the label_encodings file
• Understand the required and optional sections of the label_encodings file
• Modify the label_encodings file to use your site labels, clearances and settings

Suggested Follow-on courses:

• Personalizing Security on the Solaris 10 Operating System (SC-301-S10)
• Solaris Operating System Network Intrusion Detection (SC-345)
• Enterprise Intrusion Analysis (SC-375)
• Computer Security Forensics and System Recovery (SC-410)