SUMMARY: SunSHIELD experiences

From: Jim Napier (jnapier@soemail.ucsd.edu)
Date: Tue Nov 19 1996 - 17:25:23 CST


I got no opinions from the list on this question. I guess no one has
used this product. FYI, the Sun engineers told me that there will be no
conflicts with general Unix accounting if I run SunSHIELD.

>I've got an S1000E running 2.4 that currently has standard Unix
>accounting activated on it. The accounting data files are rotated and
>collated using the basic accounting scripts in /usr/lib/acct. I'd like
>to also run the Basic Security Module, aka SunSHIELD, to give us more
>complete auditing tools for security purposes. If I run SunSHIELD will
>it change or interfere in any way how the normal accounting data is
>collected and summarized? There is no mention of standard Unix
>accounting in the SunSHIELD manual which gives the impression that it
>can be run as a completely separate entity. However, when I called Sun
>to ask this question the engineer was unsure and is checking into it.
>Any experiences from this group about potential problems with this
>combination? I'd also like to hear opinions in general about the
>usefulness of SunSHIELD and how difficult and/or time consuming it is
>to set up and monitor. On the surface it looks like a great piece of
>software to have running. Thanks for any help.

<-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-<*>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=->
  Jim Napier jnapier@soe.ucsd.edu
  Systems Administration (619)534-5212
  School of Engineering
  UC San Diego

    "Man is nature's way of demonstrating that a little knowledge can
     be dangerous."
<-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-<*>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=->



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:11:16 CDT