FYI: Solaris Fingerprint Database (sfpDB)

From: Zareh (zareh@pacbell.net)
Date: Tue May 21 2002 - 03:22:08 EDT


Hello,

I searched the archives at http://www.sunmanagers.org/ but did not find any
mention of this, and I thought I'd pass it along to the list, sorry if this
has been posted before.

I'll just cut and paste a description of sfpDB from the PDF file at
http://www.sun.com/solutions/blueprints/0501/Fingerprint.pdf

"The Solaris Fingerprint Database (sfpDB) is a free SunSolve OnlineSM
service that enables users to verify the integrity of files distributed with
the SolarisT Operating Environment (Solaris OE). Examples of these files
include the /bin/su executable file, Solaris OE patches, and unbundled
products such as Sun ForteT Developer Tools. The list of checksums,
generated for a system, must be updated after the system is modified by
patch installation and software installations. The issue with these tools
has always been verifying that the files used to generate the baseline
checksums are correct and current."

"The Solaris Fingerprint Database addresses the issue of validating the base
Sun provided files. This includes files distributed with Solaris OE media
kits, unbundled
software, and patches. The sfpDB provides a mechanism to verify that a true
file in an official binary distribution is being used, and not an altered
version that compromises system security and causes other problems."

The URL for sfpDB is http://sunsolve.sun.com/pub-cgi/fileFingerprints.pl
You will also find automation tools at
http://www.sun.com/solutions/blueprints/tools/fingerprint.html

--
Zareh
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers


This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:24:21 EDT