Trusted Solaris

Trusted Solaris is a security-evaluated operating system based on Solaris by Sun Microsystems, featuring a mandatory access control model.

Parts of Trusted Solaris:
*Accounting
*Role-Based Access Control
*Auditing
*Device Allocation
*Mandatory Access Control Labeling

Trusted Solaris 8 is Common Criteria certified at evaluation assurance level EAL4+ against the CAPP, RBACPP, and LSPP protection profiles. It is the basis for the DoDIIS Trusted Workstation program. [ cite web
title = DTW - DODIIS Trusted Workstation
publisher = Sun Microsystems
url = http://www.sun.com/solutions/documents/business-cases/go_DTW_cc.pdf
accessdate = 2007-11-21]

olaris Trusted Extensions

Certain Trusted Solaris features, such as fine-grained privileges, are now part of the standard Solaris 10 release. The Solaris 10 11/06 update has added a component called Solaris Trusted Extensions which gives Solaris 10 the additional features necessary to position it as the successor to Trusted Solaris. Inclusion of these features in the mainstream Solaris release marks a significant change from Trusted Solaris, as it is no longer necessary to use a different Solaris release with a modified kernel for labeled security environments. Solaris Trusted Extensions is an OpenSolaris project.

Solaris Trusted Extensions enforce a mandatory access control policy on all aspects of the operating system, including device access, file, networking, print and window management services. This is achieved by adding sensitivity labels to objects, thereby establishing explicit relationships between these objects. Only appropriate (and explicit) authorization allows applications and users read and/or write access to the objects.

The component also provides labeled security features in a desktop environment. Apart from extending support for the Common Desktop Environment from the Trusted Solaris 8 release, it delivers the first labeled environment based on GNOME.cite web
title = Solaris Trusted Extensions Data Sheet
publisher = Sun Microsystems
url = http://www.sun.com/software/solaris/ds/trusted_extensions.jsp#3
accessdate = 2007-04-02] Solaris Trusted Extensions facilitate the access of data at multiple classification levels through a single desktop environment.

Solaris Trusted Extensions also delivers labeled device access, and labeled network communication (through the CIPSO standard).

References

External links

* [http://www.sun.com/software/solaris/trustedsolaris/ Trusted Solaris Operating System] Official Website
* [http://www.opensolaris.org/os/community/security/projects/tx/ OpenSolaris: Solaris Trusted Extensions project]
* [http://www.sun.com/smi/Press/sunflash/2006-02/sunflash.20060214.3.xml Solaris Trusted Extensions press release]
* [http://dmoz.org/Computers/Software/Operating_Systems/Unix/Solaris/ Open Directory: Operating Systems: Unix: Solaris]
* Software
** [http://www.blastwave.org/ Blastwave.org] - Solaris free software packages
** [http://www.sunfreeware.com/ Sunfreeware.com] - Solaris freeware