The Sun™ Security Toolkit (SST), formerly known as both the Solaris Security Toolkit and the JumpStart Architecture and Security Scripts (JASS) Toolkit, provides a flexible and extensible mechanism to harden and audit Solaris and OpenSolaris Operating Systems (OSs). SST simplifies and automates the process of OS hardening and is based on proven security best practices and practical customer site experience gathered over many years. This toolkit can be used to secure SPARC-based and x86/x64-based systems.
The Sun Security Toolkit has transitioned to the OpenSolaris community where it will have two distinct branches:
- Sun Security Toolkit: Legacy Version (SST:LV)
The Legacy Version of SST supports Solaris 10 SPARC and x86/x64. It is an evolutionary release, so anyone familiar with SST 4.2 will find transitioning to SST:LV to be easy.
To reflect SST:LV's relationship with SST 4.2, the first release will be numbered 5.0.
SST:LV 5.0 is being actively developed.
hg clone ssh://hg.opensolaris.org/hg/sst/sst-lv
- Sun Security Toolkit: Community Edition (SST:CE)
The Community Edition of SST will support OpenSolaris, Solaris 10, and any other OS in which the community has interest.
Since SST:CE stands to deviate quite a bit from SST 4.2, so version numbering will begin at 1.0.
This project is open-ended -- it will include community-driven functionality such as integration with LDAP and SMF.
Development is expected to begin in August of 2009.
hg clone ssh://hg.opensolaris.org/hg/sst/sst-ce
Service Support
The Sun Security Toolkit: Legacy Version 5.0 release is in development. When released, the toolkit will be supported by the OpenSolaris community. However, Solaris 10 systems that have been hardened by SST:LV will be supported as part of the Solaris Software Support Service Plans or the SunSpectrum Service Plan contracts. (UPDATE 5/31/09: The details of this agreement need to be verified before the SST:LV 5.0 release.)
Operating System Support
The SST:LV 5.0 software will be supported on the following SPARC and x86/x64 Solaris Operating System releases by November 2009: |
- Solaris 10 Update 8 (10/09)
The SST:LV 5.0 software will be supported on the following SPARC and x86/x64 Solaris Operating System releases by December 2009: |
- Solaris 10 Update 5 (05/08)
- Solaris 10 Update 6 (10/08)
- Solaris 10 Update 7 (5/09)
Support for these releases is actively being worked. Check back soon for updates.
SST version 4.2 fully supports SPARC and x86/x64 Solaris Operating System releases: |
- Solaris 10 Updates 0 - 4
- Solaris 9
- Solaris 8
You can download SST 4.2 at sun.com.
SST Community Edition is under development, but targeted to support: |
- OpenSolaris 2009.6
- Solaris 10 Update 7 (5/09)
- Other *nix OSes