Show address information, either for the given addrobj or all the address objects configured on the specified interface, including the address objects that are only in the persistent configuration.

State can be: disabled, down, duplicate, inaccessible, ok, tentative

Example:

# ipadm show-addr

ADDROBJ TYPE STATE ADDR

lo0/v4 static ok 127.0.0.1/8

lo0/v6 static ok ::1/128

How to Disable Programs From Using Executable Stacks

Purpose: Prevent executable stack from overflowing.

You must be in the root role.

Edit the /etc/system file, and add the following line:

set noexec_user_stack=1

Reboot the system.

# reboot

http://docs.oracle.com/cd/E19253-01/819-5461/gbbst/index.html

The command dladm is used to configure data-link interfaces in Sun Solaris. A configured data-link is represented in the system as interface that can be used for TCP/IP. Each data-link relies on either a single network device or an link aggregation device to send & recieve packets.

Network interfaces provide the connection between the system and the network. These interfaces are configured over data links, which in turn correspond to instances of hardware devices in the system.

In the current model of the network stack, interfaces and links on the software layer build on the devices in the hardware layer. More specifically, a hardware device instance in the hardware layer has a corresponding link on the data-link layer and a configured interface on the interface layer. This one-to-one relationship among the network device, its data link, and the IP interface is illustrated in the figure that follows.

Network Stack Showing Network Devices, Links, and Interfaces:

If administrative changes on the system have rendered a zone unusable or inconsistent, it is possible to change the state of an installed zone to incomplete.

Marking a zone incomplete is irreversible. The only action that can be taken on a zone marked incomplete is to uninstall the zone and return it to the configured state.

Single quotes are most strict. They prevent even variable expansion. Double quotes prevent wildcard expansion but allow variable expansion. For example:

#!/bin/sh

echo $SHELL

echo " $SHELL "

echo ' $SHELL '

This will print:

/usr/bin/bash

/usr/bin/bash

$SHELL

How to Monitor All Failed Login Attempts

This procedure captures in a syslog file all failed login attempts.

Assume the Primary Administrator role, or become superuser.

1. Assume the Primary Administrator role, or become superuser.

2. (C) Set up the /etc/default/login file with the desired values for SYSLOG and SYSLOG_FAILED_LOGINS

3. (A) Create a file with the correct permissions to hold the logging information.

Create the authlog file in the /var/adm directory.

4. (B) Edit the syslog.conf file to log failed password attempts.

The milestones that can be specified at boot time are

none

single-user

multi-user

multi-user-server

all

The svcs command displays information about service instances as recorded in the service configuration repository.

-d Lists the services or service instances upon which the given service instances depend.

C: /etc/security/exec_attr is a local database that specifies the execution attributes associated with profiles. The exec_attr file can be used with other sources for execution profiles, including the exec_attr NIS map and NIS+ table.

A profile is a logical grouping of authorizations and commands that is interpreted by a profile shell to form a secure execution environment.