Solaris Secure by Default Design
security solaris
Coming from OpenBSD background, installing Solaris can be an eye opening experience. There are many services enabled and listening to the world; luckily for Sun, most Solaris boxes are running on Sparc. Linux used to do the same thing, up until Red Hat starting to get a reputation for getting owned. Finally, there is some sanity at Sun and the Open Solaris project has some design documents on what they are working toward: Secure by Default Design Specification SBD is available in Nevada build 42 and greater.